{"id":"CVE-2026-80166","state":"PUBLISHED","title":"Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauthent","description":"Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.","publishedAt":"2026-09-07T16:36:37.437Z","updatedAt":"2026-09-09T04:26:11.103Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"dell"},"assigner":"dell","products":["Dell Secure Connect Gateway 5.0 - Application","Dell Secure Connect Gateway 5.0 - Appliance"],"affected":[{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Application","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.00 or later","versionType":"semver"}]},{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Appliance","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.16 or later","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9"],"weaknesses":["CWE-269"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/80xxx/CVE-2026-80166.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-80166","state":"PUBLISHED","datePublished":"2026-09-07T16:36:37.437Z","dateUpdated":"2026-09-09T04:26:11.103Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-08-25T21:04:22.134Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Privilege Management vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges."}],"affected":[{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Application","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.00 or later","versionType":"semver"}]},{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Appliance","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.16 or later","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":7.8,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-269","lang":"en","description":"CWE-269: Improper Privilege Management","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-09-07T16:36:37.437Z"},"datePublic":"2026-08-31T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-08T00:00:00+00:00","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3","id":"CVE-2026-80166"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-09T04:26:11.103Z"}}]}}}