Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Published: 2026-09-09
Score: 7.3 High
EPSS: < 1% Very Low
KEV: No
Impact: Denial of Service via SSRF
Action: Immediate Patch
AI Analysis

Impact

Dell Secure Connect Gateway versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) contain a Server‑Side Request Forgery vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.

Affected Systems

Dell Secure Connect Gateway version 5.0 appliance releases earlier than 5.36.00.16 and application releases earlier than 5.36.00.00 are susceptible to this issue. Later releases contain the fix.

Risk and Exploitability

The CVSS score of 7.3 indicates a high severity risk. EPSS is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote over the network, using the appliance’s exposed interfaces. No authentication is required, meaning any threat actor with reach to the gateway can attempt the exploitation.

Generated by OpenCVE AI on September 9, 2026 at 10:33 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell Secure Connect Gateway security update 5.36.00.16 or later, which addresses the SSRF flaw.
  • Ensure that the appliance and application versions meet the minimum fixed releases by inspecting the system version logs or firmware details.
  • Limit external access to the gateway’s management interfaces and monitor outgoing traffic for anomalous or unauthorized request patterns.

Generated by OpenCVE AI on September 9, 2026 at 10:33 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 09 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell
Dell secure Connect Gateway

Wed, 09 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Sep 2026 11:00:00 +0000

Type Values Removed Values Added
Title Unauthenticated SSRF in Dell Secure Connect Gateway 5.0 Leading to Denial of Service

Wed, 09 Sep 2026 08:15:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Weaknesses CWE-918
References
Metrics cvssV3_1

{'score': 7.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}

Subscriptions

Dell Secure Connect Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-09T13:01:49.587Z

Reserved: 2026-08-25T20:04:12.994Z

Link: CVE-2026-80123

cve-icon Vulnrichment

Updated: 2026-09-09T13:01:46.675Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-09T08:17:22.383

Modified: 2026-09-09T20:16:43.433

Link: CVE-2026-80123

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-10T20:45:17Z

Weaknesses
  • CWE-918

    Server-Side Request Forgery (SSRF)