CVE-2026-80133 Dell CVE debrief

Who should care

Defenders and security teams responsible for Dell Secure Connect Gateway 5.0 deployments should assess potential exposure and prioritize verification and remediation efforts to prevent unauthorized access and control. This includes reviewing and applying vendor-provided security updates, verifying exposure, and assessing impact.

Why it matters

CVE-2026-80133 is a Relative Path Traversal vulnerability in Dell Secure Connect Gateway 5.0, allowing potential remote execution. Defenders should verify exposure, assess impact, and prioritize remediation.

• Remote execution could lead to unauthorized access and control.
• Exposure could result in lateral movement within networks.
• Verification of versions and remote access configurations is necessary.
• Remediation requires applying vendor-provided security updates.

Technical summary

The vulnerability exists in Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. The CVSS score is 7.4, indicating HIGH severity. This vulnerability affects the security and integrity of the Dell SCG 5.0, and defenders should prioritize verifying exposure and assessing potential impact, focusing on remote access configurations and version checks.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact, focusing on remote access configurations and version checks.

Recommended defensive actions

• Verify Dell SCG 5.0 Appliance and Application versions, checking for versions prior to 5.36.00.16 and 5.36.00.00 respectively.
• Assess remote access configurations for potential exposure.
• Review and apply vendor-provided security updates as available.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.
• Review compensating controls for exposed systems while remediation is scheduled and verified.
• Check relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 7.4 and HIGH severity. Vendor advisory information is available from [email protected]. The vulnerability allows for remote execution, and defenders should verify exposure, assess impact, and prioritize remediation. Evidence limits are based on available source information, and defenders should review and apply vendor-provided security updates as available.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.