CVE-2026-80178 is a medium severity (CVSS 5.5) flaw in Dell Secure Connect Gateway 5.0: an improper privilege management issue that could lead to elevation of privileges. Per the CVE record, the SCG 5.0 Appliance is affected before 5.36.00.16 and the SCG 5.0 Application before 5.36.00.00. Update to those or later releases.
What's affected
- Dell SCG 5.0 Appliance versions prior to 5.36.00.16.
- Dell SCG 5.0 Application versions prior to 5.36.00.00.
- The record says a low privileged attacker with local access could exploit it.
- Fixed in Appliance 5.36.00.16 and Application 5.36.00.00 or later, as stated in the record. We could not retrieve the Dell advisory page when preparing this post, so the versions here come from the CVE record. Confirm them against the Dell advisory before you act.
Record severity: CVSS 5.5 (medium), vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N. The weakness class is CWE-269, Improper Privilege Management.
How to check if you're exposed
Open the SCG management interface and read the version of the appliance and of the application you run. Compare against 5.36.00.16 for the appliance and 5.36.00.00 for the application. If you manage many gateways, list them from your asset inventory and check each one. Dell publishes the update steps in the DSA linked below.
What to do now
- List every Secure Connect Gateway 5.0 appliance and application install.
- Read the installed version and compare with the fixed releases.
- Apply the Dell update described in DSA-2026-382 for each affected install.
- Limit network access to the gateway to the systems and admins that need it.
- Re-check the version after the update and record it.
Why it matters
Improper privilege management (CWE-269) means the software hands out or fails to limit rights in a way that lets a low privileged account act with more. It needs local access, so the risk is highest on shared or multi user hosts and after another account compromise. The record does not list this CVE as known exploited, and the Dell advisory text was not available to us, so check Dell for any exploitation notes. DSA-2026-382 covers several Secure Connect Gateway issues at once, so one update addresses the whole set.
Quick check
Which releases are fixed?
Appliance 5.36.00.16 and Application 5.36.00.00, as stated in the CVE record. Confirm in the Dell advisory.
Does it work remotely?
The record says it needs local access by a low privileged attacker.
Sources
To see where this and other CVEs sit in your own dependencies, try the free in-browser scan at gold.safeguard.sh/scan.
Last reviewed: 18 October 2026.
