CVE-2026-80133 is a high severity (CVSS 7.4) flaw in Dell Secure Connect Gateway 5.0: a relative path traversal issue that could lead to remote code execution. Per the CVE record, the SCG 5.0 Appliance is affected before 5.36.00.16 and the SCG 5.0 Application before 5.36.00.00. Update to those or later releases.
What's affected
- Dell SCG 5.0 Appliance versions prior to 5.36.00.16.
- Dell SCG 5.0 Application versions prior to 5.36.00.00.
- The record says an unauthenticated attacker with remote access could exploit it.
- Fixed in Appliance 5.36.00.16 and Application 5.36.00.00 or later, as stated in the record. We could not retrieve the Dell advisory page when preparing this post, so the versions here come from the CVE record. Confirm them against the Dell advisory before you act.
Record severity: CVSS 7.4 (high), vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. The weakness class is CWE-23, Relative Path Traversal.
How to check if you're exposed
Open the SCG management interface and read the version of the appliance and of the application you run. Compare against 5.36.00.16 for the appliance and 5.36.00.00 for the application. If you manage many gateways, list them from your asset inventory and check each one. Dell publishes the update steps in the DSA linked below.
What to do now
- List every Secure Connect Gateway 5.0 appliance and application install.
- Read the installed version and compare with the fixed releases.
- Apply the Dell update described in DSA-2026-382 for each affected install.
- Limit network access to the gateway to the systems and admins that need it.
- Re-check the version after the update and record it.
Why it matters
Relative path traversal (CWE-23) lets crafted input step outside an intended directory. With no authentication required, as the record states, the main control is to patch and to keep the gateway off networks that untrusted parties can reach. The record does not list this CVE as known exploited, and the Dell advisory text was not available to us, so check Dell for any exploitation notes. DSA-2026-382 covers several Secure Connect Gateway issues at once, so one update addresses the whole set.
Quick check
Which releases are fixed?
Appliance 5.36.00.16 and Application 5.36.00.00, as stated in the CVE record. Confirm in the Dell advisory.
Is login required?
The record says an unauthenticated attacker with remote access could exploit it, so treat reachable gateways as the first priority.
Sources
To see where this and other CVEs sit in your own dependencies, try the free in-browser scan at gold.safeguard.sh/scan.
Last reviewed: 18 October 2026.
