Insufficient Verification of Data Authenticity in Dell SCG Products
⚠️ CVE-Referenzen:
CVE-2026-80172
Dell - Secure Connect Gateway 5.0 - Application - CRITICAL - CVE-2026-80172.
The Dell SCG 5.0 Appliance and Application prior to specified versions contain a vulnerability due to insufficient verification of data authenticity. This flaw allows an unauthenticated attacker with remote access to exploit the system. By reusing a captured request, attackers can gain unauthorized ADMIN access and refresh tokens repeatedly without nonce validation or a time limit. Dell advises users to upgrade their systems promptly to mitigate this security risk.
Quelle: securityvulnerability.io