CVE-2026-80164 is a high severity (CVSS 7.4) improper certificate validation flaw in Dell Secure Connect Gateway 5.0. Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00 are affected. Dell lists unauthorized access as the outcome. Update to those builds or later, per DSA-2026-382.
What's affected
- Product: Dell Secure Connect Gateway (SCG) 5.0.
- Affected: Dell SCG 5.0 Appliance versions prior to 5.36.00.16, and Dell SCG 5.0 Application versions prior to 5.36.00.00.
- Fixed: Appliance 5.36.00.16 and Application 5.36.00.00, or later. Dell's page would not load for me, so confirm the details in DSA-2026-382.
- Weakness: CWE-295, improper certificate validation.
- CVSS 7.4 (high), vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. Dell lists the outcome as unauthorized access. Not listed in CISA KEV.
How to check if you're exposed
Find your Secure Connect Gateway deployments and read the version in the admin interface. Appliance builds need 5.36.00.16 or later, and the Application build needs 5.36.00.00 or later.
Then check who can reach the service. The record says an unauthenticated attacker with remote access could use this flaw, so network reach is the main factor. Find firewall rules or proxies that expose it beyond the networks that need it.
What to do now
- Find every Dell SCG appliance and application install and its version.
- Update to Appliance 5.36.00.16 or Application 5.36.00.00, or later, per Dell advisory DSA-2026-382.
- Restrict network access to the gateway to the networks that need it.
- Read DSA-2026-382 for the other CVEs fixed in the same update, since one upgrade covers them.
Why it matters
Certificate validation is how a client or server proves who is on the other end of a connection. When it is done badly, an attacker who can sit on the path or present a forged identity may be trusted.
Dell gives few details. The fix is the update. Also check that connections from the gateway to other systems use verified certificates.
Quick check
Does this need network position?
The vector shows high attack complexity over the network. Dell's text says an unauthenticated attacker with remote access.
Sources
Last reviewed: 19 October 2026.
