CVE-2026-80130 is a high severity (CVSS 7.1) flaw in Dell Secure Connect Gateway 5.0: a relative path traversal issue that could lead to remote code execution. Per the CVE record, the SCG 5.0 Appliance is affected before 5.36.00.16 and the SCG 5.0 Application before 5.36.00.00. Update to those or later releases.
What's affected
- Dell SCG 5.0 Appliance versions prior to 5.36.00.16.
- Dell SCG 5.0 Application versions prior to 5.36.00.00.
- The record says a low privileged attacker with remote access could exploit it.
- Fixed in Appliance 5.36.00.16 and Application 5.36.00.00 or later, as stated in the record. We could not retrieve the Dell advisory page when preparing this post, so the versions here come from the CVE record. Confirm them against the Dell advisory before you act.
Record severity: CVSS 7.1 (high), vector CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H. The weakness class is CWE-23, Relative Path Traversal.
How to check if you're exposed
Open the SCG management interface and read the version of the appliance and of the application you run. Compare against 5.36.00.16 for the appliance and 5.36.00.00 for the application. If you manage many gateways, list them from your asset inventory and check each one. Dell publishes the update steps in the DSA linked below.
What to do now
- List every Secure Connect Gateway 5.0 appliance and application install.
- Read the installed version and compare with the fixed releases.
- Apply the Dell update described in DSA-2026-382 for each affected install.
- Limit network access to the gateway to the systems and admins that need it.
- Re-check the version after the update and record it.
Why it matters
Relative path traversal (CWE-23) means input containing directory climbing sequences escapes the folder the software meant to restrict. When that reaches a file the system later runs or loads, the result can be code execution, which is the outcome the record names. The record does not list this CVE as known exploited, and the Dell advisory text was not available to us, so check Dell for any exploitation notes. DSA-2026-382 covers several Secure Connect Gateway issues at once, so one update addresses the whole set.
Quick check
Which releases are fixed?
Appliance 5.36.00.16 and Application 5.36.00.00, as stated in the CVE record. Confirm in the Dell advisory.
Is this the same as CVE-2026-80133?
They share a weakness class and the same fixed versions, but the record says 80130 needs a low privileged attacker and 80133 needs none.
Sources
To see where this and other CVEs sit in your own dependencies, try the free in-browser scan at gold.safeguard.sh/scan.
Last reviewed: 18 October 2026.
