CVE-2026-80238

Published: Sep 7, 2026Updated: Sep 11, 2026 Sources: CVE List NVDCWE-250

9.3CRITICAL

NVD MITRE

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This vulnerability is considered critical because a low-privileged operator with SSH access to the SCG host can gain root-level access to the host without requiring a password by leveraging the exposed Docker socket. Additionally, an attacker who compromises a service running within the orchestrator container can access the same socket and escape the container boundary to obtain host-level control. Dell recommends that customers upgrade at the earliest opportunity.

In plain language

AI Act now

This affects Dell Secure Connect Gateway 5.0 before 5.36.00.00 (Application) or 5.36.00.16 (Appliance); a typical small business should act quickly if it runs this software.

Executive summary

A local privilege-escalation flaw exposes the Docker interface, enabling an unauthenticated local actor to execute code as root on the host.

If affected, business impact

Full gateway host takeoverSupport-connection disruptionStored system data exposureSecurity controls bypassed

What to do now

Check whether you run Dell Secure Connect Gateway 5.0 and identify whether it is the Application or Appliance edition.
Confirm the installed version in the product administration interface or with your Dell support contact.
Upgrade the Application edition to 5.36.00.00 or later, or the Appliance edition to 5.36.00.16 or later.
Restrict SSH and local access to approved administrators while the upgrade is pending.

Patch / advisory Usually a quick update

What is it

This is a flaw that can let someone already inside the system take complete control of the computer running the gateway. It is like giving a visitor with access to a staff-only room the master key to every room in the building.

Who is affected

This matters to you if you run Dell Secure Connect Gateway 5.0. It is only a risk after someone gains local access, such as through SSH or by compromising a service running on the system.

How urgent is it

A person who gains local access can use this flaw to take root-level control of the gateway host, so treat it as urgent. No confirmed real-world exploitation, public exploit code, or CISA Known Exploited Vulnerabilities listing is reported in the findings, but the impact after access is gained is severe.

What to do — in detail

Confirm the deployed edition and version, then review who can reach the host through SSH and which local services or containers can access the Docker socket. Upgrade Secure Connect Gateway 5.0 Application to 5.36.00.00 or later; upgrade Secure Connect Gateway 5.0 Appliance to 5.36.00.16 or later. Follow Dell’s release-specific upgrade procedure and validate gateway operation and support connectivity after the change. If patching is delayed, limit SSH and local host access to essential administrators, investigate unexpected container creation or Docker activity, and review privileged command activity for signs of misuse. CISA has not assigned a KEV remediation due date because this CVE is not listed in KEV.

Technical context

CVSS 3.1 is 9.3 Critical (AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H). CWE-250, Execution with Unnecessary Privileges: the default-exposed Docker socket permits a local actor or compromised orchestrator container to execute commands as root and escape normal host controls. The vector is local, requires no authentication or user interaction once local access is established, and is reachable by local users/services in the default configuration. It is not in CISA KEV, no public exploit code is recorded, and no CVE-specific exploitation is reported. EPSS is 0.1% (4th percentile) with a flat trend.

This is a general assessment based on public vulnerability data. It does not account for your specific infrastructure — when in doubt, consult a security specialist.

CVSS Vector Breakdown

Exploitability

AV:LAttack Vector

Local

AC:LAttack Complexity

Low

PR:NPrivileges Required

None

UI:NUser Interaction

None

Scope

S:CScope

Changed

Impact

C:HConfidentiality

High

I:HIntegrity

High

A:HAvailability

High

Open in CVSS calculator →

Weaknesses

CWE-250

Affected Products

Dell

commercial·USaka dell technologies

secure connect gatewayOn-premNetwork Device

Networking Infrastructure

Secure Connect Gateway 5.0 - ApplicationOn-prem

Enterprise Software / itsm-monitoring

Secure Connect Gateway 5.0 - ApplianceOn-prem

Enterprise Software / itsm-monitoring

Exploitability

Official Patch Available

Is your org exposed to CVE-2026-80238?Request an assessment to establish which checks are appropriate for your systems. Check my exposure

Attack Graph

Products CVE Techniques Tactics

Click technique nodes for MITRE ATT&CK details · drag to pan · Ctrl/⌘ + scroll to zoom, or go fullscreen.

MITRE ATT&CK

2 techniques

Privilege Escalation

View detailed technique mapping

References

https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

dell.com

News mentions

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks
en·The Hacker News·Sep 21, 2026 Exploited Cisco Identity Services Engine zero-day

Unlock Complete Vulnerability Intelligence

Get the full picture for CVE-2026-80238 and every CVE in our database. Create a free account — no credit card required.

Create Free Account

Plain-language analysis

Impact assessment and exploitation scenario in plain English

Attack graph visualization

Interactive attack path and kill chain mapping

Exploit details & PoC links

ExploitDB, Metasploit, GitHub PoCs with direct links

Nuclei scanner templates

Ready-to-use vulnerability scanner templates

Full remediation guide

Patch instructions, workarounds, and compliance impact

Interactive AI chat

Ask questions about this vulnerability in natural language

Related vulnerabilities

Semantically similar CVEs and attack patterns

REST API & MCP access

Integrate vulnerability data into your workflows