Execution with Unnecessary Privileges in Dell SCG 5.0 Appliance

⚠️ CVE-Referenzen: CVE-2026-80238
Dell - Secure Connect Gateway 5.0 - Application - CRITICAL - CVE-2026-80238. The Dell SCG 5.0 Appliance and its associated applications prior to specified versions exhibit a vulnerability that allows an unauthenticated attacker with local access to exploit execution with unnecessary privileges. This can lead to a bypass of protection mechanisms, enabling low-privileged operators with SSH access to gain root-level control of the host system without a password. Furthermore, an attacker exploiting a service within the orchestrator container can escape the container boundary via the exposed Docker socket, gaining unauthorized access to host-level resources. Customers are strongly advised to upgrade their systems to remediate this issue and enhance their security posture.
Quelle: securityvulnerability.io