Reported by 4 outlets

Timeline

1. original reporting

   Critical Dell Secure Connect Gateway Flaws Enable Unauthenticated Admin Access and Remote Code Execution

   cyberpress.org · 35d ago · September 8th, 2026

   Dell has disclosed three critical vulnerabilities in its Secure Connect Gateway (SCG) 5.0 platform that could allow unauthenticated attackers to obtain administrator-level access, execute commands remotely, and potentially gain root control of affected hosts. The vulnerabilities affect Dell Secure Connect Gateway 5.0 Appliance releases earlier than version 5.36.00.16 and Secure Connect Gateway 5.0 Application releases earlier than version 5.36.00.00. The most severe flaw, tracked as CVE-2026-80172, carries a CVSS score of 9.8 and stems from insufficient verification of data authenticity. Critical Dell Secure Connect Gateway Flaws According to Dell , a remote, unauthenticated attacker could capture and repeatedly replay a request to generate ADMIN access tokens and refresh tokens. The vulnerability does not require user interaction, authentication, or special privileges. Because the affected component fails to validate a nonce or apply a time limit to requests, attackers can replay captured requests indefinitely. This creates a significant risk for internet-accessible or insufficiently segmented SCG deployments, where a successful attack could provide persistent administrative access to the management environment. CVE-2026-80172 is rated critical under CVSS v3.1 with the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H . The vector reflects a network-exploitable issue with low attack complexity and complete impact to confidentiality, integrity, and availability. A second vu

2. update from gbhackers.com

   Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access

   gbhackers.com · 35d ago · September 8th, 2026

   These flaws can expose enterprise deployments to unauthenticated administrative access, remote command execution, and potential host-level compromise. Detailed in Dell Security Advisory DSA-2026-382, these issues affect SCG 5.0 appliance versions earlier than 5.36.00.16 and application versions […] The post Dell Secure Connect Gateway Critical Flaws Allow Unauthenticated Remote Code Execution and Admin Access appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform .

3. update from www.thehackerwire.com

   🟠 CVE-2026-79641 - High (7.5) Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,

   www.thehackerwire.com · 34d ago · September 9th, 2026

   🟠 CVE-2026-79641 - High (7.5) Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,

   via Mastodon https://www.thehackerwire.com/vulnerability/CVE-2026-79641/

4. mentioned by radar.offseq.com

   Dell SCG 5.0 (pre-5.36.00.00) hit by CRITICAL vuln (CVE-2026-80172, CVSS 9.8): unauthenticated attackers can reuse requests to gain admin ac

   radar.offseq.com · 34d ago · September 9th, 2026