CVE-2026-80175 Dell CVE debrief

Who should care

System administrators and security teams responsible for Dell SCG systems should assess exposure and prioritize remediation. System administrators and security teams should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance. System administrators and security teams should plan vendor-supported updates or mitigations through normal change control where exposure is confirmed.

Why it matters

CVE-2026-80175 is a low-severity vulnerability in Dell Secure Connect Gateway that may lead to information exposure if exploited. System administrators and security teams should assess exposure, prioritize remediation, and verify version updates.

• Information exposure may occur due to exploitation of vulnerable Dell SCG versions
• Remediation priority is moderate due to low CVSS score and limited attack vector
• Verification of version updates and system inventory is necessary

Technical summary

The vulnerability exists in Dell SCG versions prior to 5.36.00.16 and 5.36.00.00, allowing a low-privileged attacker with local access to potentially exploit the vulnerability, leading to information exposure. The vulnerability is an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low-privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure. The affected versions are prior to 5.36.00.16 and 5.36.00.00. System administrators and security teams should assess exposure and prioritize remediation.

Defensive priority

Assess exposure and prioritize remediation for Dell SCG versions prior to 5.36.00.16 and 5.36.00.00.

Recommended defensive actions

• Assess exposure of Dell SCG versions prior to 5.36.00.16 and 5.36.00.00
• Prioritize remediation for affected systems
• Verify version updates for Dell SCG
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, affected versions, and potential impact. The vulnerability was reported by [email protected] and details can be found in the official CVE Program record and NIST NVD detail page. The affected versions are prior to 5.36.00.16 and 5.36.00.00. The CVE record was published on 2026-09-09T09:17:12.420Z and has not been modified since then.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.