---
cve: "CVE-2026-80238"
severity: "CRITICAL"
cvss: 9.3
epss: "0.2%"
vendor: "Dell"
kev: false
exploited: false
published: "2026-09-07 13:20:39"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-11-08T20:49:45+01:00"
---

# CVE-2026-80238

> 9.3 CRITICAL

## Beschreibung

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass. This vulnerability is considered critical because a low-privileged operator with SSH access to the SCG host can gain root-level access to the host without requiring a password by leveraging the exposed Docker socket. Additionally, an attacker who compromises a service running within the orchestrator container can access the same socket and escape the container boundary to obtain host-level control. Dell recommends that customers upgrade at the earliest opportunity.

## CNA-Record (Kanon, cvelistV5)

- CNA: **dell**
- State: PUBLISHED
- Stand: 2026-09-08 13:14:40
- CNA-CVSS: **9.3** (`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`)

## CISA-Anreicherung (vulnrichment/ADP)

- CISA-SSVC (Coordinator, v2.0.3):
  - Exploitation: **none**
  - Automatable: **no**
  - Technical Impact: **total**

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Schwachstellen-Klasse

- **CWE-250** — Execution with Unnecessary Privileges
  The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

## Angriffsmuster (CAPEC)

- [CAPEC-69 — Target Programs with Elevated Privileges](https://capec.mitre.org/data/definitions/69.html) _(Severity: Very High)_
- [CAPEC-104 — Cross Zone Scripting](https://capec.mitre.org/data/definitions/104.html) _(Severity: High)_
- [CAPEC-470 — Expanding Control over the Operating System from the Database](https://capec.mitre.org/data/definitions/470.html) _(Severity: Very High)_

## BSI-Hinweise (deutsch)

- [Dell Secure Connect Gateway: Mehrere Schwachstellen](https://wid.cert-bund.de/portal/wid/sicherheitshinweis/WID-SEC-W-2026-3184) — _BSI-Einstufung: hoch_
  Ein Angreifer kann mehrere Schwachstellen in Dell Secure Connect Gateway ausnutzen, um unbefugten Zugriff zu erlangen, Authentifizierungs- und Schutzmechanismen zu umgehen, sensible Informationen oder Dateisysteminhalte offenzulegen bzw. zu manipulieren, Berechtigungen bis hin zu Root-Rechten zu erhöhen, SQL- und Befehlsinjektionen durchzuführen, Containergrenzen zu überwinden, Denial-of-Service-Zustände auszulösen und in mehreren Fällen Befehle bzw. Code remote auszuführen.

## Referenzen

- <https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2026-80238/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_