CVE-2026-80122: Dell Secure Connect Gateway Auth Bypass Flaw

CVE-2026-80122 Overview

CVE-2026-80122 is an Improper Certificate Validation vulnerability [CWE-295] affecting Dell Secure Connect Gateway (SCG) 5.0. The flaw exists in Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00. An unauthenticated remote attacker can exploit the weakness to gain unauthorized access to affected systems. Dell disclosed the issue in security advisory DSA-2026-382, which addresses multiple vulnerabilities in the Secure Connect Gateway virtual edition.

Critical Impact
A remote, unauthenticated attacker able to intercept or coerce network traffic can bypass certificate trust checks, enabling man-in-the-middle interception and unauthorized access to the gateway.

Affected Products

Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16
Dell Secure Connect Gateway 5.0 Application versions prior to 5.36.00.00
Dell Secure Connect Gateway Virtual Edition (per DSA-2026-382)

Discovery Timeline

2026-09-09 - CVE-2026-80122 published to the National Vulnerability Database
2026-09-09 - Last updated in NVD database

Technical Details for CVE-2026-80122

Vulnerability Analysis

Dell Secure Connect Gateway acts as a communication conduit between customer environments and Dell support infrastructure, transporting telemetry, alerts, and remote support sessions. The affected releases fail to properly validate X.509 certificates presented during TLS communication. Because certificate trust checks are incomplete, the gateway accepts connections it should reject.

An attacker positioned on the network path can present a forged or untrusted certificate and complete a TLS handshake with the appliance. This breaks the confidentiality and integrity guarantees the gateway relies on for outbound and inbound sessions. The result is unauthorized access, as noted by Dell in advisory DSA-2026-382.

Root Cause

The root cause is a missing or incomplete certificate validation routine in the SCG codebase, classified under [CWE-295] Improper Certificate Validation. Common failure modes in this class include skipping hostname verification, ignoring certificate chain errors, or trusting self-signed certificates without pinning. The exact validation gap is not enumerated in the public advisory.

Attack Vector

The attack vector is network-based and requires no authentication or user interaction. An adversary in a privileged network position, such as an on-path attacker on an ISP link, hostile Wi-Fi, or compromised routing infrastructure, can intercept SCG traffic. By presenting a fraudulent certificate, the attacker terminates the TLS session, reads or modifies traffic, and can pivot to unauthorized access on the gateway.

No public proof-of-concept exploit is available at the time of publication, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The EPSS score is 0.136%.

See the Dell Security Update DSA-2026-382 for vendor technical details.

Detection Methods for CVE-2026-80122

Indicators of Compromise

Unexpected TLS certificates presented to or by the SCG appliance, especially self-signed or issued by unfamiliar Certificate Authorities.
Unusual outbound connections from the SCG host to destinations outside Dell's published support endpoints.
Authentication or session events on the gateway lacking a corresponding legitimate administrative source.

Detection Strategies

Inspect TLS sessions terminating on the SCG appliance and alert on certificate chain anomalies, expired certificates, or hostname mismatches.
Compare running SCG appliance and application versions against the patched baselines (5.36.00.16 and 5.36.00.00).
Correlate gateway access logs with expected administrative activity to surface unauthenticated or anomalous access.

Monitoring Recommendations

Forward SCG appliance logs and network flow data to a centralized SIEM for continuous review.
Monitor for changes to the SCG trust store and any new CA certificates added outside change control.
Track outbound destinations from the gateway and baseline them against Dell's documented endpoints.

How to Mitigate CVE-2026-80122

Immediate Actions Required

Upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later.
Upgrade Dell SCG 5.0 Application to version 5.36.00.00 or later.
Restrict network reachability of the SCG management and data interfaces to trusted administrative networks only.
Rotate credentials and API tokens used by the gateway after patching if compromise is suspected.

Patch Information

Dell has released fixed versions as documented in Dell Security Update DSA-2026-382. Administrators should apply the appliance update to 5.36.00.16 and the application update to 5.36.00.00 at the earliest maintenance window. Follow Dell's upgrade guidance for the virtual edition to preserve configuration and telemetry continuity.

Workarounds

Segment the SCG appliance into a dedicated VLAN and enforce strict egress filtering to Dell support endpoints only.
Terminate SCG traffic behind a TLS-inspecting proxy that enforces strict certificate validation and pinning where feasible.
Increase monitoring of gateway TLS sessions until the patched versions are deployed.

bash

# Verify installed Dell Secure Connect Gateway version
# Replace with the appropriate CLI or admin console command for your deployment
scg-cli version

# Expected patched output:
# Appliance: 5.36.00.16 or later
# Application: 5.36.00.00 or later