Dell Secure Connect Gateway Has a Path Traversal That Can Reach RCE
- The Mess: Dell Secure Connect Gateway has a relative path traversal that lets a low-privileged remote attacker reach files outside the intended path.
- The Damage: The flaw can be chained into remote execution and compromise the gateway that connects directly to enterprise infrastructure.
- The Fix: Update SCG Application to 5.36.00.00 or later and the Appliance to 5.36.00.16 or later.
Dell Secure Connect Gateway is supposed to help administrators monitor and maintain enterprise systems.
CVE-2026-80130 gives an attacker a filesystem primitive inside that management infrastructure.
The vulnerability is a relative path traversal. Dell says a low-privileged attacker with remote access can exploit it to reach remote execution. The CVSS 3.1 score is 7.1, with network attack vector, low privileges required and no user interaction.
The Gateway Is the Target
This is not a random desktop application.
Secure Connect Gateway sits in enterprise environments specifically to provide connectivity and management capabilities for Dell infrastructure.
That makes compromise of the gateway interesting even before an attacker gets full code execution.
CVE-2026-80130 allows attacker-controlled path handling to escape the intended directory boundary. Dell classifies the resulting impact as high for integrity and availability, with limited confidentiality impact.
The dangerous part is the final step: Dell explicitly describes the vulnerability as potentially leading to remote execution.
Low Privileges Are Enough
The attacker does not need to be an administrator.
The CVSS vector is:
AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:H/A:H
The PR:L component matters.
An attacker needs a low-privileged remote position, but does not need user interaction. The relatively high attack complexity keeps the score below the critical range, yet the potential result is still compromise of the gateway.
This is the kind of vulnerability that becomes significantly more interesting once an attacker already has a foothold in an enterprise account or exposed management interface.
Dell Patched a Large Batch of SCG Bugs
CVE-2026-80130 was not released alone.
Dell’s August 31 security advisory lists a large collection of Secure Connect Gateway vulnerabilities, including multiple authentication flaws, path traversal bugs, hard-coded credentials, certificate-validation problems and vulnerabilities that can lead to command or remote execution.
That matters because patching one CVE and leaving the rest of the affected SCG installation untouched is not a real remediation strategy.
The current Dell fixes are:
- SCG Application: 5.36.00.00 or later
- SCG Appliance: 5.36.00.16 or later
Dell recommends upgrading to those remediated versions.
CERT-In Calls the Update Critical
India’s CERT-In included CVE-2026-80130 in its September 9 security advisory covering Dell Secure Connect Gateway. The advisory lists the affected SCG 5.0 Application and Appliance releases and classifies the overall issue set as CRITICAL.
That is a useful reminder that enterprise management appliances deserve the same patch urgency as Internet-facing servers.
They are infrastructure.
Compromise one and the attacker gets a much more interesting position than a compromised workstation.
Bugstoday Opinion
Path traversal bugs are old.
Management gateways are old.
The combination is still dangerous.
The interesting question is not whether ../ is an ancient attack technique. It is why enterprise software still allows attacker-controlled paths to cross security boundaries in components that sit next to privileged infrastructure.
CVE-2026-80130 does not need a spectacular exploit chain to matter.
Give an attacker the right low-privileged foothold, and the gateway becomes the next target.
Today’s Bugs. Tomorrow’s Breaches.
Technical Sources
Dell Security Advisory DSA-2026-382
CVE-2026-80130
CERT-In — CIVN-2026-0449
Dell Secure Connect Gateway Security Updates
