CVE-2026-80055

MediumCVSS 4.4/10Last modified Sep 9, 2026

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-90

Affected software

VendorProductVersions
DellSecure Connect Gateway 5.0 - Application< 5.36.00.00 or later
DellSecure Connect Gateway 5.0 - Appliance< 5.36.00.16 or later

References

Timeline

Published
Sep 9, 2026
Last modified
Sep 9, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-800565.5Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of SensCVE-2026-800575.5Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-codedCVE-2026-800585.5Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Cleartext Storage CVE-2026-80065.4Insufficient policy enforcement in DevTools in Google Chrome prior to 148.0.7778.96 allowed an attacker who convinced a user to install a maCVE-2026-800675.4MasterStudy LMS plugin for WordPress before 3.7.50 contains a path traversal vulnerability that allows authenticated Subscriber-level users CVE-2026-800695.4MasterStudy LMS plugin for WordPress before 3.7.50 contains a missing authorization vulnerability that allows any authenticated user, includCVE-2026-80077.5Insufficient validation of untrusted input in Cast in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromised theCVE-2026-800717.2The User Registration & Membership WordPress plugin before 5.2.8 does not properly restrict who may author a membership plan or validate thCVE-2026-800724.7The User Registration & Membership WordPress plugin before 5.2.8 does not validate the destination of a post-login redirect before redirectCVE-2026-800736.5Out-of-bounds read in Microsoft Office Outlook allows an unauthorized attacker to disclose information over a network.CVE-2026-800748.8Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attacker to execute code over a network.CVE-2026-800757.8Heap-based buffer overflow in Windows Work Folders allows an authorized attacker to elevate privileges locally.