CVE-2024-22458

Dell Secure Connect Gateway (version 5.18) is affected by an Inadequate Encryption Strength vulnerability. An unauthenticated network attacker could potentially recover plaintext from a block of ciphertext due to weak cryptographic strength. The CTI sources consistently identify the affected prod...

CVE-2024-22457

CVE-2024-22457 affects Dell Secure Connect Gateway 5.20. The vulnerability arises in the SRS to SCG update path due to improper authentication, allowing a remote low-privileged attacker to impersonate the server by presenting a fake self-signed certificate when communicating with the remote serve...

CVE-2024-28965

CVE-2024-28965 affects Dell SCG prior to 5.24.00.00. The issue is an Improper Access Control in an internal enable REST API exposed by the SCG (if enabled via the UI by an Admin). A remote, low-privileged attacker could trigger internal APIs intended for Admin Users on the backend database, poten...

CVE-2024-28968

Summary (CVE-2024-28968) Dell SCG (Dell Secure Connect Gateway) versions prior to 5.24.00.00 suffer an Improper Access Control vulnerability in the internal email and collection settings REST APIs (enabled by Admin from UI). A remote, low-privileged attacker could potentially cause execution of A...

CVE-2024-28966

CVE-2024-28966 affects Dell SCG with versions prior to 5.24.00.00, due to an Improper Access Control vulnerability in an internal update REST API that a Admin UI-enabled function exposes. A remote, low-privileged attacker could access APIs intended for Admin Users on the backend database and pote...

CVE-2024-28967

Dell SCG (Secure Connect Gateway) vulnerable to improper access control in versions prior to 5.24.00.00 due to an exposed internal maintenance REST API that, if enabled by an Admin user from the UI, could allow a remote, low-privileged attacker to execute admin-only backend APIs associated with t...

CVE-2024-29169

Dell SCG (Secure Connect Gateway) versions prior to 5.22.00.00 have a SQL Injection vulnerability in the SCG UI for the Internal Audit REST API. A remote authenticated attacker could potentially execute SQL commands on the backend database, leading to unauthorized access and modification of appli...

CVE-2023-44294

CVE-2023-44294 affects Dell Secure Connect Gateway Application/Appliance (v5.10.00.00–v5.18.00.00). Root cause: SQL injection in the Collection Rest API filters that can be exploited by a user with a valid session to disclose data from the product database. Impact and context align with MEDIUM se...

CVE-2025-26475

CVE-2025-26475 affects Dell Secure Connect Gateway (SCG) 5.0 Appliance – SRS 5.26. The connected sources indicate a related authorization issue exists in SCG versions prior to 5.28.00.14, stemming from the Live-Restore setting and potentially allowing improper authentication. The practical guidan...

CVE-2024-29168

Summary: Dell Secure Connect Gateway (SCG) prior to v5.22.00.00 contains a SQL Injection vulnerability in the SCG UI for the internal assets REST API. A remote authenticated attacker could potentially exploit this flaw to execute SQL commands on the application’s backend database, leading to unau...

CVE-2024-28969

Dell SCG prior to version 5.24.00.00 contains an Improper Access Control vulnerability in an internal update REST API that is only accessible if enabled by an Admin from the UI. A remote low-privileged attacker could potentially trigger this API and cause execution of certain admin-only APIs agai...

CVE-2023-44293

CVE-2023-44293 affects Dell Secure Connect Gateway Application and Secure Connect Gateway Appliance (versions 5.10.00.00–5.18.00.00). The root cause is an SQL injection vulnerability in the IP Range Rest API filters, which could allow a malicious user with a valid session to inject content and ca...

CVE-2024-51539

Dell Secure Connect Gateway (SCG) Application and Appliance versions prior to 5.28 are affected by an SQL injection due to improper neutralization of SQL elements. The vulnerability is exploitable locally by a high-privilege attacker, potentially leading to disclosure of non-sensitive information...

CVE-2025-23382

Dell Secure Connect Gateway (SCG) 5.0 Appliance – SRS 5.26 is affected by an information disclosure vulnerability (Exposure of Sensitive System Information to an Unauthorized Control Sphere). A high-privilege attacker with remote access could potentially exploit this to obtain sensitive informati...

CVE-2021-36340

Dell EMC SCG 5.00.00.10 and earlier are affected by CVE-2021-36340, a local sensitive information disclosure vulnerability that could allow a local attacker to read sensitive information. The initial description and connected records confirm affected product/version and impact; exploitation statu...

CVE-2024-48016

CVE-2024-48016 affects Dell Secure Connect Gateway (SCG) 5.0 Appliance – SRS, 5.24. Root cause: use of a broken/risky cryptographic algorithm. Impact: potential information disclosure via remote access by a low-privileged attacker; attacker could use exposed credentials to access the system with ...

CVE-2023-23695

Dell Secure Connect Gateway (SCG) v5.14.00.12 is affected by a broken cryptographic algorithm vulnerability that could enable remote, unauthenticated MitM attacks to extract sensitive data. This is documented across multiple sources (NVD, PRION, PRION-like entries, PT-2023-6682) and centers on SC...

CVE-2024-47240

CVE-2024-47240 concerns Dell Secure Connect Gateway (SCG) version 5.24. The vulnerability is described as an incorrect default permissions issue, where a local attacker with low privileges can access the file system and potentially gain write access to unauthorized data, which could also cause a ...

CVE-2024-47241

Dell Secure Connect Gateway (SCG) 5.0 Appliance — SRS 5.24 contains an Improper Certificate Validation vulnerability. A low-privileged, remote attacker could exploit a certificate validation error to gain unauthorized access and modify transmitted data. Affected: SCG 5.24 (SRS). Root cause: certi...

CVE-2023-28043

Dell SCG 5.14 is affected by an information-disclosure vulnerability in the upgrade path from SRS to SCG. A remote, low-privileged attacker could potentially retrieve plaintext information. Affected component: Dell SCG/Policy Manager upgrade flow; root cause involves insufficient protection durin...

CVE-2026-80123

Dell Secure Connect Gateway 5.0 (SCG) contains a Server-Side Request Forgery (SSRF) vulnerability in both the Appliance and Application editions. An unauthenticated attacker with remote access can exploit this flaw to cause a denial of service . The CVSS 3.1 score is 7.3 (HIGH) , with low impact ...

CVE-2025-46363

Dell Secure Connect Gateway (SCG) 5.0 software and appliances 5.26.00.00–5.30.00.00 expose a Relative Path Traversal via an internal collection download REST API that is usable when enabled from the Admin UI. A low-privilege remote attacker could abuse this to access restricted resources. A remed...

CVE-2026-27101

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions 5.28.00.xx–5.32.00.xx are affected by a Path Traversal vulnerability. The issue stems from improper path filtering, enabling a high-privilege attacker within the management network to potentially achieve remote code executio...

CVE-2026-80172

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated remote attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens , since there is no nonce valida...

CVE-2025-46696

Summary: CVE-2025-46696 affects Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, versions 5.26–5.30, with an Execution with Unnecessary Privileges flaw that could enable Local Privilege Escalation by a high-privilege attacker with local access. Publicly reported details specify a ...

CVE-2026-80238

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an Execution with Unnecessary Privileges vulnerability (CVSS 9.3, Critical). The root cause is an exposed Docker socket on the host, allowing a low-privileged operator ...

CVE-2026-79636

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote network access could potentially exploit this flaw to g...

CVE-2026-79731

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this flaw, resulting in information exposure . ...

CVE-2026-80124

CVE-2026-80124 affects Dell Secure Connect Gateway 5.0 (Appliance and Application editions), specifically versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). The vulnerability is an Insertion of Sensitive Information into Log File (CWE-532), meaning confidential data may be wri...

CVE-2026-78480

This vulnerability affects Dell Secure Connect Gateway (SCG) 5.0 , specifically Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . The issue is a Missing Authentication for Critical Function , allowing an unauthenticated remote attacker to gain unauthorized acce...

CVE-2026-79689

Dell Secure Connect Gateway (SCG) 5.0 contains an OS Command Injection vulnerability in both the Appliance and Application editions, affecting versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access can exploit the flaw to achieve scri...

CVE-2026-79942

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively are affected by an Execution with Unnecessary Privileges vulnerability. A high-privileged attacker with local access could exploit this to gain unauthorized access, resulting i...

CVE-2026-79945

CVE-2026-79945 is an OS Command Injection vulnerability in Dell Secure Connect Gateway (SCG) 5.0 , affecting Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . A low-privileged local attacker could exploit the improper neutralization of special elements to achie...

CVE-2026-79972

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions are affected by an SQL Injection vulnerability (Improper Neutralization of Special Elements used in an SQL Command). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A high-privileged...

CVE-2026-80055

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions contain an LDAP Injection vulnerability in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access could exploit this flaw to achieve script injection . The CNA-a...

CVE-2026-79947

Dell SCG 5.0 (Secure Connect Gateway) is affected by an OS Command Injection vulnerability in both the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). A low-privileged attacker with local access can exploit improper neutralization of special elements use...

CVE-2026-80177

Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected by an SQL Injection vulnerability. A low-privileged attacker with remote access could exploit this to achieve script injection , resulting in high confidentiality impact with n...

CVE-2026-79735

Dell Secure Connect Gateway (SCG) 5.0 is affected by a Use of Hard-coded Cryptographic Key vulnerability in both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) editions. An unauthenticated attacker with remote access could exploit this flaw, potentiall...

CVE-2026-79741

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Command Injection vulnerability (Improper Neutralization of Special Elements used in a Command). An unauthenticated attacker with remote network access could...

CVE-2026-78482

Dell Secure Connect Gateway (SCG) 5.0 is affected by an OS Command Injection vulnerability caused by improper neutralization of special elements used in an OS command. Affected versions include SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00 . A low-privileged at...

CVE-2026-78488

Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain an OS Command Injection vulnerability caused by improper neutralization of special elements in OS commands. A low-privileged remote attacker could exploit this to achieve command ex...

CVE-2026-78494

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this to gain unauthorized access , with high impact to confidentiality and integrity but no i...

CVE-2026-79640

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an SQL Injection vulnerability. A low-privileged attacker with remote access could potentially exploit the flaw to gain unauthorized access to the system. The CVSS 3.1...

CVE-2026-79973

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application are affected by an Unsynchronized Access to Shared Data in a Multithreaded Context vulnerability. Affected versions are Aprior to 5.36.00.16 (Appliance) and prior to 5.36.00.00 (Application). A low-privileged attacker with remote acc...

CVE-2026-80170

Dell SCG 5.0 Appliance (prior to 5.36.00.16 ) and Dell SCG 5.0 Application (prior to 5.36.00.00 ) are affected by a hard-coded credentials vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve protection mechanism bypass , resulting in high confidenti...

CVE-2026-80175

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 , respectively, are affected by an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low-privileged attacker with local access could potential...

CVE-2026-61410

Dell SCG 5.0 Appliance (versions prior to 5.36.00.16 ) and Dell SCG 5.0 Application (versions prior to 5.36.00.00 ) contain a Missing Authorization vulnerability. An unauthenticated remote attacker can execute commands on the target system by sending a specially crafted request to the application...

CVE-2026-78481

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a Use of Hard-coded Cryptographic Key vulnerability. A low-privileged attacker with remote access could potentially exploit this flaw to achieve a protection mechanism...

CVE-2026-78484

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions contain an OS Command Injection vulnerability caused by improper neutralization of special elements in OS commands. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A low-privileged a...

CVE-2026-78487

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain a Use of Hard-coded Cryptographic Key vulnerability. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00 . A low-privileged attacker with local access could exploit this to ...