Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Published: 2026-09-09
Score: 7.3 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Dell Secure Connect Gateway versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) contain a Server‑Side Request Forgery vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Affected Systems

Dell Secure Connect Gateway version 5.0 appliance releases earlier than 5.36.00.16 and application releases earlier than 5.36.00.00 are susceptible to this issue. Later releases contain the fix.

Risk and Exploitability

The CVSS score of 7.3 indicates a high severity risk. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote over the network, using the appliance’s exposed interfaces. No authentication is required, meaning any threat actor with reach to the gateway can attempt the exploitation.

Generated by OpenCVE AI on September 9, 2026 at 10:33 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell Secure Connect Gateway security update 5.36.00.16 or later, which addresses the SSRF flaw.
  • Ensure that the appliance and application versions meet the minimum fixed releases by inspecting the system version logs or firmware details.
  • Limit external access to the gateway’s management interfaces and monitor outgoing traffic for anomalous or unauthorized request patterns.

Generated by OpenCVE AI on September 9, 2026 at 10:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 09 Sep 2026 11:00:00 +0000

Type Values Removed Values Added
Title Unauthenticated SSRF in Dell Secure Connect Gateway 5.0 Leading to Denial of Service

Wed, 09 Sep 2026 08:15:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-09T07:59:15.217Z

Reserved: 2026-08-25T20:04:12.994Z

Link: CVE-2026-80123

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-09T08:17:22.383

Modified: 2026-09-09T08:17:22.383

Link: CVE-2026-80123

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-09T10:45:08Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)