Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-80172

Quick assessment

Affected
Dell Secure Connect Gateway 5.0 - Application
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dell SCG 5.0 设备（Appliance）版本低于 5.36.00.16 和 Dell SCG 5.0 应用（Application）版本低于 5.36.00.00 存在一个“数据真实性验证不足”（Insufficient Verification of Data Authenticity）漏洞。具有远程访问权限的未经身份验证的攻击者可以利用此漏洞，导致未经授权的访问。该漏洞被评定为严重（critical），因为未经身份验证的攻击者可以重复使用捕获到的请求，以生成管理员（ADMIN）访问权限并刷新令牌。由

CVSS 9.8 · Critical
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-80172

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated attacker with remote access could exploit this, leading to unauthorized access. This vulnerability is considered critical as an unauthenticated attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens. Since there is no nonce validation or time limit on requests, the attack can be performed indefinitely. Dell recommends customers to upgrade at the earliest opportunity
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Dell Secure Connect Gateway 5.0 - Application 0 ~ 5.36.00.00 or later -
Dell Secure Connect Gateway 5.0 - Appliance 0 ~ 5.36.00.16 or later -

II. Public POCs for CVE-2026-80172

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-80172

请登录查看更多情报信息。

Same Patch Batch · Dell · 2026-09-09 · 42 CVEs total

CVE-2026-78491 8.2 HIGH Dell SCG 5.0 证书验证不当致未授权访问
CVE-2026-79637 7.7 HIGH Dell SCG 5.0 早期版本证书验证不当漏洞
CVE-2026-79641 7.5 HIGH Dell SCG 5.0低于5.36.00.16/00.00存在OS命令注入致提权
CVE-2026-78490 7.5 HIGH Dell SCG 5.0旧版本认证限制不当漏洞
CVE-2026-78492 7.4 HIGH Dell SCG 5.0 证书验证不当漏洞
CVE-2026-79963 7.4 HIGH Dell SCG 5.0 代码下载完整性检查漏洞
CVE-2026-78494 7.4 HIGH Dell SCG 5.0 5.36之前版本证书验证不当
CVE-2026-80122 7.3 HIGH Dell SCG 5.0 证书验证缺陷致未授权访问
CVE-2026-80123 7.3 HIGH Dell SCG 5.0 SSRF致DoS漏洞
CVE-2026-79635 7.3 HIGH Dell SCG 5.0 多版本SSRF漏洞
CVE-2026-79692 7.3 HIGH Dell SCG 5.0早期版本文件路径控制漏洞
CVE-2026-79695 7.3 HIGH Dell SCG 5.0 压缩数据放大导致远程拒绝服务
CVE-2026-78485 7.3 HIGH Dell SCG 5.0 路径遍历致未授权访问
CVE-2026-79972 7.2 HIGH Dell SCG 5.0 低于5.36版本存在SQL注入漏洞
CVE-2026-79636 7.0 HIGH Dell SCG 5.0证书主机不匹配漏洞
CVE-2026-79728 6.5 MEDIUM Dell SCG 5.0 相对路径遍历漏洞
CVE-2026-78481 6.5 MEDIUM Dell SCG 5.0硬编码密钥致保护机制绕过
CVE-2026-80177 6.5 MEDIUM Dell SCG SQL注入漏洞
CVE-2026-79974 6.4 MEDIUM Dell SCG 5.0 特定版本身份认证不当漏洞
CVE-2026-79973 6.3 MEDIUM Dell SCG 5.0 多线程竞争导致拒绝服务

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: Secure Connect Gateway 5.0 - Application
Same vendor: Dell
Same weakness: CWE-345

V. Comments for CVE-2026-80172

No comments yet

Leave a comment