CVE-2026-80164: High severity Dell SCG 5.0 Appliance vulnerability

Published Sep 7, 2026
·
Updated

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Affected Software

2 affected components
Dell SCG 5.0 Appliance<5.36.00.16
Dell SCG 5.0 Application<5.36.00.00

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Dell SCG 5.0 Appliance to a version that resolves this vulnerability.

    Fixed in 5.36.00.16
  2. Upgrade

    Upgrade Dell SCG 5.0 Application to a version that resolves this vulnerability.

    Fixed in 5.36.00.00

Event History

Sep 7, 2026
CVE Published
via MITRE·01:24 PM
Data Sourced
via MITRE·01:24 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Which deployments need remediation?

Dell SCG 5.0 Appliance deployments below version 5.36.00.16 and Dell SCG 5.0 Application deployments below version 5.36.00.00 are affected.

2

Does exploitation require an account or user interaction?

No. The vulnerability is described as remotely exploitable by an unauthenticated attacker, and no user interaction is required.

3

What access must an attacker have?

An attacker needs remote access to the affected Dell SCG 5.0 deployment. The provided information does not further define required network exposure or reachability conditions.

4

What is the likely impact of successful exploitation?

Successful exploitation could lead to unauthorized access. The supplied severity vector also indicates high confidentiality and integrity impact, with no availability impact listed.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203