Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
Published: 2026-09-07
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Protection mechanism bypass
Action: Patch Required
AI Analysis

Impact

This vulnerability is an Improper Check or Handling of Exceptional Conditions in Dell Secure Connect Gateway 5.0 that can allow an attacker to bypass a protection mechanism. The flaw enables an unauthenticated attacker with remote access to manipulate the system in a way that the intended security controls are circumvented. The documentation indicates that bypassing these controls could potentially expose the system to further exploitation, though precise downstream effects are not detailed.

Affected Systems

Affected systems are Dell Secure Connect Gateway 5.0 Appliance versions earlier than 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application earlier than 5.36.00.00. These versions were shipped before the fix that addresses the improper exception handling. Users running any of the listed older versions are potentially vulnerable if exposed to remote traffic.

Risk and Exploitability

The CVSS score of 7.5 describes a medium‑to‑high severity vulnerability. An attacker could exploit it remotely without authentication, as noted in the advisory. Although the EPSS score is unavailable, the lack of a KEV listing suggests no publicly known exploits yet, but the potential impact and ease of access mean the risk remains high. Administrators should treat this as a priority for remediation.

Generated by OpenCVE AI on September 7, 2026 at 15:29 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell Secure Connect Gateway security update that upgrades Appliance to 5.36.00.16 or Application to 5.36.00.00.
  • Restrict remote access to the gateway by allowing only authorized IP addresses or requiring VPN connectivity until the update is fully deployed.
  • Disable or limit exposed management interfaces on the gateway to reduce attack surface.
  • Monitor gateway logs for unusual authentication failures or attempts to exploit the bypass and alert administrators.

Generated by OpenCVE AI on September 7, 2026 at 15:29 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell secure Connect Gateway

Wed, 09 Sep 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Tue, 08 Sep 2026 21:00:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway Appliance
Dell secure Connect Gateway Application
Vendors & Products Dell
Dell secure Connect Gateway Appliance
Dell secure Connect Gateway Application

Mon, 07 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Title Improper Exception Handling Causes Protection Bypass in Dell Secure Connect Gateway 5.0

Mon, 07 Sep 2026 13:00:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Check or Handling of Exceptional Conditions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
Weaknesses CWE-703
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


Subscriptions

Dell Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-09T14:28:43.725Z

Reserved: 2026-08-25T20:04:12.995Z

Link: CVE-2026-80135

cve-icon Vulnrichment

Updated: 2026-09-09T14:28:23.779Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-07T13:20:39.047

Modified: 2026-09-11T21:24:27.980

Link: CVE-2026-80135

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T20:37:09Z

Weaknesses
  • CWE-703

    Improper Check or Handling of Exceptional Conditions