Dell TechnologiesCVE-2026-80127
Dell Technologies Secure Connect Gateway 5.0: command injection
High7.2CVE-2026-80127 · Published Sep 7, 2026 · updated Sep 16, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Secure Connect Gateway 5.0 - Appliance Product | < 5.36.00.16 or later | 5.36.00.16 or later |
| Secure Connect Gateway 5.0 - Application Product | < 5.36.00.00 or later | 5.36.00.00 or later |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-78
More Dell Technologies advisories
All Dell Technologies| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 7 | Dell Technologies Secure Connect Gateway 5.0: improper certificate validation | Medium5.5 | - Application 5.36.00.00 or later+1 more |
| Sep 7 | Dell Technologies Secure Connect Gateway 5.0: cleartext secrets | Medium5.5 | - Application 5.36.00.00 or later+1 more |
| Sep 7 | Dell Technologies Secure Connect Gateway 5.0: improper certificate validation | Medium5.9 | - Application 5.36.00.00 or later+1 more |
| Sep 7 | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0... | Medium6.5 | - Application 5.36.00.00 or later+1 more |
| Sep 7 | Dell Technologies Secure Connect Gateway 5.0: improper privilege management | High7.8 | - Application 5.36.00.00 or later+1 more |
| Sep 7 | Dell Technologies Secure Connect Gateway 5.0: information disclosure | Medium5.5 | - Application 5.36.00.00 or later+1 more |