Secure Connect Gateway

Related CVEsby mentions

• CVE-2026-801729.8<1%
  Unauthenticated Token Replay Flaw in Dell Secure Connect Gateway 5.0
  Dell Secure Connect Gateway (SCG) 5.0 contains an Insufficient Verification of Data Authenticity flaw (CWE-345) that lets an unauthenticated remote attacker replay a previously captured request to obtain ADMIN access and refresh tokens. Because the product performs no nonce validation and imposes no time limit on requests, the same captured request can be reused indefinitely to mint new privileged tokens. An attacker gains persistent, unauthorized administrative access to the gateway, which serves as the connectivity hub between Dell customer environments and Dell support services. Organizations running SCG 5.0 Appliance prior to 5.36.00.16 or SCG 5.0 Application prior to 5.36.00.00 are affected. Exploitation has not been observed so far: EPSS puts 30-day exploitation probability at 0.3%, the flaw is not in CISA KEV, and no public proof-of-concept is known.
  · Dell Secure Connect Gateway (SCG) 5.0 Appliance All versions prior to 5.36.00.16 · Dell Secure Connect Gateway (SCG) 5.0 Application All versions prior to 5.36.00.00large
• CVE-2026-614109.41%
  Missing Authorization Allows Unauthenticated RCE in Dell Secure Connect Gateway 5.0
  CVE-2026-61410 is a missing-authorization flaw (CWE-862) in Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. An unauthenticated attacker with remote network access can send specially crafted requests that bypass the application's intended restrictions on code execution, triggering remote command execution on the gateway host. Given the CVSS 9.4 vector (high confidentiality and integrity impact, low availability impact), a successful attacker effectively gains broad control over the system, and related reporting also describes unauthenticated RCE and admin access on affected SCG deployments. Any organization running the affected SCG 5.x builds — typically enterprises using SCG as the on-premises gateway that connects Dell EMC infrastructure to Dell support services — is affected. No public proof-of-concept, CISA KEV listing, or confirmed in-the-wild exploitation is known; EPSS currently estimates a modest 1.3% probability of exploitation within 30 days.
  · Dell Secure Connect Gateway (SCG) 5.0 Appliance all versions prior to 5.36.00.16 · Dell Secure Connect Gateway (SCG) 5.0 Application all versions prior to 5.36.00.00large
• CVE-2026-802389.3<1%
  Privilege Escalation to Root via Exposed Docker Socket in Dell Secure Connect Gateway 5.0
  CVE-2026-80238 is an execution-with-unnecessary-privileges flaw (CWE-250) in Dell Secure Connect Gateway (SCG) 5.0 in which an exposed Docker socket can be used to obtain host-level access without requiring a password, bypassing protection mechanisms. It is triggered by local access: a low-privileged operator with SSH access to the SCG host can leverage the exposed Docker socket to gain root-level access, and an attacker who has compromised a service running inside the orchestrator container can use the same socket to escape the container boundary and seize the host. Successful exploitation grants full root-level control of the gateway host, with high impact to confidentiality, integrity, and availability across the security scope (CVSS 3.1: 9.3, critical). Any organization running Dell SCG 5.0 Appliance versions prior to 5.36.00.16 or Dell SCG 5.0 Application versions prior to 5.36.00.00 is affected. No exploitation in the wild, public proof-of-concept, or KEV listing is known, and EPSS currently puts the 30-day exploitation probability at only 0.1% (4th percentile).
  · Dell Secure Connect Gateway (SCG) 5.0 Appliance prior to 5.36.00.16 · Dell Secure Connect Gateway (SCG) 5.0 Application prior to 5.36.00.00large

Appears with