CVE-2026-80238Dell · Secure_connect_gateway
Vulnerability data via NVD (ingested)
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This vulnerability is considered critical because a low-privileged operator with SSH access to the SCG host can gain root-level access to the host without requiring a password by leveraging the exposed Docker socket. Additionally, an attacker who compromises a service running within the orchestrator container can access the same socket and escape the container boundary to obtain host-level control. Dell recommends that customers upgrade at the earliest opportunity.
External references
Search for exposed instances
Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).
vuln:CVE-2026-80238product:"Dell Secure Connect Gateway"http.html:"Secure Connect Gateway"More intel sources (5)
vuln:CVE-2026-80238vulnerabilities.cve_id: CVE-2026-80238CVE-2026-80238CVE-2026-80238"CVE-2026-80238" exploit -site:nvd.nist.gov