PatchSiren cyber security CVE debrief
CVE-2026-80057 Dell CVE debrief
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00 contain a Use of Hard-coded Cryptographic Key vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability exists in the Dell SCG 5.0 Appliance and Application, which are used for secure connectivity and management. This vulnerability could allow an attacker to access sensitive information. System administrators and security teams should assess exposure and apply the security update provided by Dell.
- Vendor
- Dell
- Product
- Secure Connect Gateway 5.0 - Application
- CVSS
- MEDIUM 5.5
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-09-07
- Original CVE updated
- 2026-09-11
- Advisory published
- 2026-09-07
- Advisory updated
- 2026-09-11
Who should care
System administrators and security teams responsible for Dell SCG 5.0 Appliance and Application deployments should assess exposure and apply the security update. They should also verify the version of Dell SCG 5.0 Appliance and Application in use and ensure it is up-to-date. Additionally, they should restrict local access to the system to minimize the attack surface and monitor system logs for potential exploitation attempts. Inventory checks should be
Why it matters
CVE-2026-80057 is a medium-priority vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application that could lead to information disclosure if exploited. System administrators and security teams should assess exposure, apply the security update, and monitor system logs for potential exploitation attempts.
- Potential information disclosure due to exploitation by a low-privileged attacker.
- Verification of system logs to detect potential exploitation attempts.
- Review and application of the security update provided by Dell.
- Inventory checks to ensure affected versions are identified and remediated.
Technical summary
The vulnerability exists due to the use of a hard-coded cryptographic key in Dell SCG 5.0 Appliance and Application. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to information disclosure. The vulnerability affects Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00. The vulnerability could allow an attacker to access sensitive information. Dell has provided a security update to address this vulnerability.
Defensive priority
Medium-priority vulnerability requiring immediate attention due to potential information disclosure.
Recommended defensive actions
- Review and apply the security update provided by Dell.
- Verify the version of Dell SCG 5.0 Appliance and Application in use and ensure it is up-to-date.
- Restrict local access to the system to minimize the attack surface.
- Monitor system logs for potential exploitation attempts.
- Perform an inventory check to identify and remediate affected versions.
- Review compensating controls for exposed systems while remediation is scheduled and verified.
- Track exceptions, retest remediated assets, and close the item only after evidence is documented.
Evidence notes
The CVE record and NVD vulnerability detail page provide information about the vulnerability, its CVSS score, and affected versions. The vulnerability is caused by the use of a hard-coded cryptographic key in Dell SCG 5.0 Appliance and Application. Evidence is based on official CVE and NVD sources, with limitations on detailed technical information. Dell SCG 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively are affected. The CVE record was published on 2026-09-07T15:17:32.397Z and has not been The
Sources and references
Verified primary and authoritative sources
-
CVE-2026-80057 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-80057
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-80057 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-80057
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.