CVE-2026-80129 in Secure Connect Gateway
Summary
by MITRE • 09/07/2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 09/07/2026
The identified security flaw resides within Dell SCG 5.0 Appliance versions prior to build 5.36.00.16 and the corresponding Application versions prior to 5.36.00.00. This vulnerability is classified as an Improper Limitation of a Pathname to a Restricted Directory, commonly known in industry standards as CWE-22: Path Traversal. The core technical deficiency involves insufficient validation or sanitization of user-supplied input that dictates file system paths. When the application processes these inputs, it fails to adequately restrict access to designated secure directories, allowing an attacker to manipulate path sequences such as dot-dot-slash characters to escape the intended directory boundary. This lack of strict enforcement permits read and write operations outside the sandboxed environment where the application is designed to operate securely.
The operational impact of this vulnerability is severe due to its potential for remote code execution. Because Dell SCG appliances are typically deployed in enterprise storage environments, they often possess elevated privileges necessary to manage hardware components and data stores. An unauthenticated attacker with network access can exploit this path traversal flaw to read sensitive configuration files, system logs, or credential stores located outside the restricted directory. More critically, if the application allows for file upload functionality or writes user-controlled content back to the filesystem without proper validation, an attacker could place a malicious script or binary in a location where it is subsequently executed by the service with high-level privileges. This effectively grants the attacker full control over the underlying operating system hosting the SCG appliance.
From a threat intelligence perspective, this vulnerability aligns with MITRE ATT&CK technique T1083: File and Directory Discovery, as an initial step to gather information about the target environment. If exploited for code execution, it maps directly to T1204: User Execution or potentially T1505.003: Web Shell if a malicious file is uploaded and triggered. The absence of authentication requirements significantly lowers the barrier to entry for attackers, making this vulnerability attractive for automated scanning tools and opportunistic attacks targeting exposed management interfaces on corporate networks.
Mitigation strategies must prioritize immediate patching to version 5.36.00.16 or later for appliances and 5.36.00.00 or later for applications, as these versions contain the necessary code fixes to enforce strict path validation. In environments where immediate patching is not feasible due to operational constraints, network-level controls should be implemented to restrict access to the SCG management interface exclusively from trusted IP ranges using firewalls or VPNs. Additionally, deploying a Web Application Firewall with rules specifically tuned to detect and block common path traversal patterns can provide an additional layer of defense against exploitation attempts while monitoring logs for any signs of unauthorized file system access.