105 matches found
CVE-2024-51539
Dell Secure Connect Gateway (SCG) Application and Appliance versions prior to 5.28 are affected by an SQL injection due to improper neutralization of SQL elements. The vulnerability is exploitable locally by a high-privilege attacker, potentially leading to disclosure of non-sensitive information...
CVE-2026-80172
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Insufficient Verification of Data Authenticity vulnerability. An unauthenticated remote attacker can repeatedly reuse a captured request to generate ADMIN access and refresh tokens , since there is no nonce valida...
CVE-2026-80123
Dell Secure Connect Gateway 5.0 (SCG) contains a Server-Side Request Forgery (SSRF) vulnerability in both the Appliance and Application editions. An unauthenticated attacker with remote access can exploit this flaw to cause a denial of service . The CVSS 3.1 score is 7.3 (HIGH) , with low impact ...
CVE-2026-80238
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively contain an Execution with Unnecessary Privileges vulnerability (CVSS 9.3, Critical). The root cause is an exposed Docker socket on the host, allowing a low-privileged operator ...
CVE-2026-79946
Dell SCG 5.0 (Secure Connect Gateway) is affected by an Improper Neutralization of Alternate XSS Syntax vulnerability in both the Appliance and Application versions. The affected versions are prior to 5.36.00.16 (Appliance) and prior to 5.36.00.00 (Application). An unauthenticated attacker with r...
CVE-2026-79945
CVE-2026-79945 is an OS Command Injection vulnerability in Dell Secure Connect Gateway (SCG) 5.0 , affecting Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . A low-privileged local attacker could exploit the improper neutralization of special elements to achie...
CVE-2026-79735
Dell Secure Connect Gateway (SCG) 5.0 is affected by a Use of Hard-coded Cryptographic Key vulnerability in both the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00) editions. An unauthenticated attacker with remote access could exploit this flaw, potentiall...
CVE-2026-79689
Dell Secure Connect Gateway (SCG) 5.0 contains an OS Command Injection vulnerability in both the Appliance and Application editions, affecting versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access can exploit the flaw to achieve scri...
CVE-2026-79947
Dell SCG 5.0 (Secure Connect Gateway) is affected by an OS Command Injection vulnerability in both the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). A low-privileged attacker with local access can exploit improper neutralization of special elements use...
CVE-2026-79972
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions are affected by an SQL Injection vulnerability (Improper Neutralization of Special Elements used in an SQL Command). Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A high-privileged...
CVE-2026-79636
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote network access could potentially exploit this flaw to g...
CVE-2026-79942
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively are affected by an Execution with Unnecessary Privileges vulnerability. A high-privileged attacker with local access could exploit this to gain unauthorized access, resulting i...
CVE-2026-80055
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application editions contain an LDAP Injection vulnerability in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). An unauthenticated attacker with remote access could exploit this flaw to achieve script injection . The CNA-a...
CVE-2026-61410
Dell SCG 5.0 Appliance (versions prior to 5.36.00.16 ) and Dell SCG 5.0 Application (versions prior to 5.36.00.00 ) contain a Missing Authorization vulnerability. An unauthenticated remote attacker can execute commands on the target system by sending a specially crafted request to the application...
CVE-2026-80124
CVE-2026-80124 affects Dell Secure Connect Gateway 5.0 (Appliance and Application editions), specifically versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). The vulnerability is an Insertion of Sensitive Information into Log File (CWE-532), meaning confidential data may be wri...
CVE-2026-79639
Dell Secure Connect Gateway (SCG) 5.0 is affected by an Improper Certificate Validation vulnerability in both the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). An unauthenticated attacker with adjacent network access could exploit this flaw to gain una...
CVE-2026-79730
Dell SCG 5.0 (Secure Connect Gateway) contains a TOCTOU race condition vulnerability in both its Appliance and Application editions. An unauthenticated remote attacker could exploit this to achieve denial of service . The assigned CVSS v3.1 score is 5.6 (MEDIUM) with a high attack complexity requ...
CVE-2026-79731
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this flaw, resulting in information exposure . ...
CVE-2026-79943
Dell Secure Connect Gateway (SCG) 5.0 (Appliance and Application) contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve a protection mechanism bypass , resulting in low impact to both c...
CVE-2026-61409
Dell Secure Connect Gateway (SCG) 5.0 Application, in versions prior to 5.36.00.00 , is affected by an OS Command Injection vulnerability (Improper Neutralization of Special Elements). An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote cod...
CVE-2026-78480
This vulnerability affects Dell Secure Connect Gateway (SCG) 5.0 , specifically Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 . The issue is a Missing Authentication for Critical Function , allowing an unauthenticated remote attacker to gain unauthorized acce...
CVE-2026-79693
Dell Secure Connect Gateway (SCG) 5.0 is affected by a Least Privilege Violation in versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application). A high-privileged attacker with local access could potentially exploit this flaw to gain unauthorized access to the system. The vulnerability ...
CVE-2026-79695
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application are affected by an Improper Handling of Highly Compressed Data (Data Amplification) vulnerability. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated attacker with remote netw...
CVE-2026-78482
Dell Secure Connect Gateway (SCG) 5.0 is affected by an OS Command Injection vulnerability caused by improper neutralization of special elements used in an OS command. Affected versions include SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00 . A low-privileged at...
CVE-2026-80170
Dell SCG 5.0 Appliance (prior to 5.36.00.16 ) and Dell SCG 5.0 Application (prior to 5.36.00.00 ) are affected by a hard-coded credentials vulnerability. An unauthenticated attacker with remote network access could exploit this to achieve protection mechanism bypass , resulting in high confidenti...
CVE-2026-80175
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 , respectively, are affected by an Insertion of Sensitive Information into Externally-Accessible File or Directory vulnerability. A low-privileged attacker with local access could potential...
CVE-2026-80176
Dell Secure Connect Gateway 5.0 (SCG) Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00, respectively, contain a Plaintext Storage of a Password vulnerability. A low-privileged attacker with local access could exploit this flaw, resulting in information disclosure . The CVSS v...
CVE-2026-78487
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contain a Use of Hard-coded Cryptographic Key vulnerability. Affected versions are SCG 5.0 Appliance prior to 5.36.00.16 and SCG 5.0 Application prior to 5.36.00.00 . A low-privileged attacker with local access could exploit this to ...
CVE-2026-78494
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this to gain unauthorized access , with high impact to confidentiality and integrity but no i...
CVE-2026-79941
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Command Injection vulnerability (improper neutralization of special elements). An unauthenticated attacker with remote access could exploit this to achieve s...
CVE-2026-79950
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote network access could exploit this flaw to achieve information exposure ....
CVE-2026-79964
Dell Secure Connect Gateway (SCG) 5.0 Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ) contain an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could exploit this flaw to launch ...
CVE-2026-79973
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application are affected by an Unsynchronized Access to Shared Data in a Multithreaded Context vulnerability. Affected versions are Aprior to 5.36.00.16 (Appliance) and prior to 5.36.00.00 (Application). A low-privileged attacker with remote acc...
CVE-2026-78488
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) contain an OS Command Injection vulnerability caused by improper neutralization of special elements in OS commands. A low-privileged remote attacker could exploit this to achieve command ex...
CVE-2026-79637
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote network access could exploit this flaw to gain unauthorized access , ...
CVE-2026-80177
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected by an SQL Injection vulnerability. A low-privileged attacker with remote access could exploit this to achieve script injection , resulting in high confidentiality impact with n...
CVE-2026-78481
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a Use of Hard-coded Cryptographic Key vulnerability. A low-privileged attacker with remote access could potentially exploit this flaw to achieve a protection mechanism...
CVE-2026-78485
Dell Secure Connect Gateway (SCG) 5.0 Appliance (prior to 5.36.00.16) and Application (prior to 5.36.00.00) are affected by a Path Traversal vulnerability. An unauthenticated remote attacker with network access can exploit this to gain unauthorized access, with low impact on confidentiality, inte...
CVE-2026-79642
Dell Secure Connect Gateway (SCG) 5.0 — both Appliance and Application editions — is affected by an Improper Certificate Validation vulnerability. The flaw allows an unauthenticated remote attacker to gain unauthorized access , with low impact on confidentiality, integrity, and availability. The ...
CVE-2026-79740
This vulnerability affects Dell Secure Connect Gateway (SCG) 5.0 — specifically the Appliance (versions prior to 5.36.00.16 ) and Application (versions prior to 5.36.00.00 ). The root cause is the use of hard-coded credentials , which an unauthenticated attacker with network access could exploit ...
CVE-2026-79741
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Command Injection vulnerability (Improper Neutralization of Special Elements used in a Command). An unauthenticated attacker with remote network access could...
CVE-2026-79961
Dell Secure Connect Gateway (SCG) 5.0 contains a Missing Authentication for Critical Function vulnerability. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . An unauthenticated attacker with network access could potentially exploit the flaw to gain unautho...
CVE-2026-80125
Dell Secure Connect Gateway (SCG) 5.0 versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected by an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote network access could potentially exploit this flaw to gain unauthorized access , re...
CVE-2026-80127
Dell SCG 5.0 (Secure Connect Gateway) is affected by an OS Command Injection vulnerability in both the Appliance and Application editions. Affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00 . A high-privileged attacker with remote access could exploit the impr...
CVE-2026-80133
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Relative Path Traversal vulnerability. An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote code exec...
CVE-2026-78483
CVE-2026-78483 affects Dell Secure Connect Gateway (SCG) 5.0 in both Appliance and Application editions. The vulnerability is an Improper Certificate Validation flaw that allows an unauthenticated remote attacker to bypass protection mechanisms. Affected versions are Appliance prior to 5.36.00.16...
CVE-2026-78491
Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Certificate Validation vulnerability affecting both the Appliance and Application editions. An unauthenticated remote attacker could potentially exploit this flaw to gain unauthorized access , with a CVSS 3.1 base score of 8.2 (HIGH) refl...
CVE-2026-79640
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain an SQL Injection vulnerability. A low-privileged attacker with remote access could potentially exploit the flaw to gain unauthorized access to the system. The CVSS 3.1...
CVE-2026-79644
Dell Secure Connect Gateway (SCG) 5.0 contains an Improper Certificate Validation vulnerability affecting the Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00). An unauthenticated attacker with remote network access could potentially exploit this flaw to gain...
CVE-2026-79645
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access could exploit this to gain unauthorized access , resultin...