Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized Access
Dell patches three critical flaws (CVSS up to 9.8) in Secure Connect Gateway 5.0 enabling admin token replay, unauthenticated RCE, and root escalation.
Dell disclosed three critical vulnerabilities in Secure Connect Gateway 5.0 appliance and application deployments. CVE-2026-80172 (CVSS 9.8) lets unauthenticated attackers replay captured requests, which lack nonce validation and time limits, to repeatedly mint administrator access and refresh tokens. CVE-2026-61410 (9.4) is a missing-authorization flaw enabling unauthenticated remote command execution, and CVE-2026-80238 (9.3) is an exposed Docker socket allowing local privilege escalation to root and container escape. Fixes ship in appliance 5.36.00.16 and application 5.36.00.00.
- CVE-2026-80172: request replay without nonce validation grants persistent admin tokens
- CVE-2026-61410: missing authorization enables unauthenticated remote command execution
- CVE-2026-80238: exposed Docker socket allows root escalation and container escape
- Compromise could provide a foothold into environments with Dell-managed critical infrastructure
- Patch to 5.36.00.16/5.36.00.00 and review token-generation and SSH logs
- Tags
- cve-2026-61410cve-2026-80172cve-2026-80238delldockerprivilege-escalationrcesecure-connect-gateway
- Vendors
- Dell
- Products
- Secure Connect Gateway
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2026-61410+1 related CVE | Missing Authorization Allows Unauthenticated RCE in Dell Secure Connect Gateway 5.0 | 9.4 group max | 1% | ||
| CVE-2026-80172 | Unauthenticated Token Replay Flaw in Dell Secure Connect Gateway 5.0 | 9.8 | <1% |
From the original article
2 min read at cybersecuritynews.com
Dell has disclosed three critical vulnerabilities in its Secure Connect Gateway 5. 0 platform that could allow attackers to gain unauthorized access, execute commands remotely, and obtain root-level control of affected systems. The flaws affect Dell Secure Connect Gateway 5.
By Abinaya · cybersecuritynews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.