CVE-2026-80054: Dell SCG 5.0 Privilege Escalation Flaw

CVE-2026-80054 Overview

CVE-2026-80054 affects Dell Secure Connect Gateway (SCG) 5.0, both the Appliance and Application editions. The vulnerability stems from an Incorrect Permission Assignment for Critical Resource weakness [CWE-732]. A low-privileged attacker with local access to the affected system can exploit this flaw to gain unauthorized access to protected resources. Dell addressed the issue in Appliance version 5.36.00.16 and Application version 5.36.00.00. Successful exploitation impacts confidentiality but does not affect integrity or availability.

Critical Impact
Local low-privileged users can read data outside their authorized scope on unpatched Dell SCG 5.0 deployments.

Affected Products

Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16
Dell Secure Connect Gateway (SCG) 5.0 Application versions prior to 5.36.00.00
Dell SCG Virtual Edition deployments running the affected releases

Discovery Timeline

2026-09-07 - CVE-2026-80054 published to the National Vulnerability Database
2026-09-08 - Last updated in NVD database

Technical Details for CVE-2026-80054

Vulnerability Analysis

The flaw is classified under [CWE-732] Incorrect Permission Assignment for Critical Resource. Dell SCG 5.0 provisions one or more critical resources, such as configuration files, credential stores, or runtime directories, with permissions broader than required. Any authenticated local user on the appliance or application host inherits read access to material that should be restricted to privileged service accounts.

The vulnerability requires local access and low privileges, and no user interaction is needed to trigger it. Exploitation does not require code execution primitives or memory corruption. A user simply reads a resource whose access control list is misconfigured. The confidentiality impact is high because exposed material can include operational secrets used by the gateway to broker connections between Dell support infrastructure and customer environments.

Root Cause

The root cause is a permission assignment error introduced during packaging or installation of the SCG 5.0 software. File system objects or equivalent OS-level resources are created with an overly permissive mode, granting read access to non-privileged principals. The design assumes only the SCG service account should read these resources, but the enforced permissions do not match that intent.

Attack Vector

Exploitation requires an existing local account on the SCG appliance or the host running the SCG Application. The attacker enumerates SCG-owned resources on disk and reads any file whose permissions permit access. No network reachability, elevated privilege, or social engineering is required. Refer to the Dell Security Advisory DSA-2026-382 for the vendor's technical description.

No public proof-of-concept exploit is available at the time of publication.

Detection Methods for CVE-2026-80054

Indicators of Compromise

Unexpected read access to SCG configuration directories or credential stores by non-service accounts
Local shell sessions from user accounts that do not normally interact with SCG-owned files
Copies of SCG configuration or key material appearing in user home directories or /tmp

Detection Strategies

Audit file permissions on SCG installation directories and compare against Dell's documented baseline
Enable Linux auditd rules on the SCG appliance to log open and read syscalls against sensitive SCG paths
Correlate local login events with subsequent access to gateway configuration files in a central log platform

Monitoring Recommendations

Forward SCG host audit logs to a centralized SIEM or data lake for retention and correlation
Alert on any non-root, non-service-account access to SCG credential and configuration files
Track version strings from SCG deployments to confirm patched builds are in production

How to Mitigate CVE-2026-80054

Immediate Actions Required

Upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later
Upgrade Dell SCG 5.0 Application to version 5.36.00.00 or later
Inventory all SCG Virtual Edition deployments and prioritize patching in environments with shared local access
Review and revoke unnecessary local accounts on SCG hosts

Patch Information

Dell released fixed versions covered in Dell Security Advisory DSA-2026-382. Apply the SCG 5.0 Appliance update 5.36.00.16 or the SCG 5.0 Application update 5.36.00.00 as appropriate for the deployment mode. Reboot or restart the SCG service after patching to ensure the corrected permissions are applied to on-disk resources.

Workarounds

Restrict local login on SCG hosts to administrators responsible for the gateway
Manually tighten permissions on SCG configuration and credential files to owner-only read where supported by Dell
Isolate SCG appliances on management network segments to reduce the pool of potential local users

bash

# Configuration example: review permissions on SCG resources
# Replace /opt/dell/scg with your installation path
find /opt/dell/scg -type f -perm /o+r -exec ls -l {} \;
find /opt/dell/scg -type d -perm /o+rx -exec ls -ld {} \;