CVE-2026-80130 in Secure Connect Gateway
Summary
by MITRE • 09/07/2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Analysis
by VulDB Data Team • 09/07/2026
The identified security flaw resides within the Dell SCG 5.0 Appliance and Application software suites for versions preceding 5.36.00.16 and 5.36.00.00 respectively. This vulnerability is classified as a Relative Path Traversal, which falls under the broader category of CWE-22 Improper Limitation of a Pathname to a Restricted Directory. The core technical issue stems from insufficient validation or sanitization of user-supplied input that dictates file system access paths. When an application processes such input without properly resolving relative path components like dot-dot sequences, it allows an attacker to manipulate the intended directory structure and access files located outside the designated secure root directory.
In this specific instance, the vulnerability is particularly severe because it can be exploited by a low-privileged user who already possesses remote network access to the system. This lowers the barrier for entry significantly compared to vulnerabilities requiring administrative privileges or physical access. The attacker does not need to bypass complex authentication mechanisms but rather leverages existing valid credentials with limited scope to execute path manipulation attacks against the underlying operating system files through the application interface.
The operational impact of this vulnerability is critical, as it can lead directly to Remote Code Execution on the affected appliance. By traversing directories beyond their intended boundaries, an attacker may access sensitive configuration files, credential stores, or executable binaries. If the application executes commands based on these manipulated paths or allows the upload and execution of malicious scripts in accessible locations, the attacker gains full control over the underlying operating system. This compromises the confidentiality, integrity, and availability of all data managed by the storage controller gateway, potentially leading to a complete breach of the associated storage infrastructure.
From an offensive security perspective, this vulnerability aligns with MITRE ATT&CK techniques related to Command and Scripting Interpreter abuse or File and Directory Discovery followed by Execution. The attacker utilizes valid credentials (T1078) to access the application interface, then employs path traversal (CWE-22) to locate critical system components before executing arbitrary code (T1059). This sequence allows for lateral movement within the network if the compromised appliance serves as a pivot point for further attacks against other storage or compute resources.
To mitigate this risk, organizations must immediately apply the vendor-recommended patches updating Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Application versions to 5.36.00.00 or later. These updates contain code changes that enforce strict input validation and canonicalization of file paths before processing them. Additionally, administrators should review access control policies to ensure that low-privileged accounts have the minimum necessary permissions required for their operational tasks, adhering to the principle of least privilege. Network segmentation strategies should also be reviewed to limit remote access points to only those absolutely necessary, reducing the attack surface available to potential adversaries attempting to exploit this path traversal flaw.