CVE-2026-80055
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 4.4
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
- CWE
- CWE-90
- Published
- 2026-09-09
- Last modified
- 2026-09-09
Affected products
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
Weakness type
Related vulnerabilities
- CVE-2026-78579 — Improper Input Sanitization in Okta Access Gateway LDAP Datastore Filter Interpolation
- CVE-2026-81205 — LDAP / Active Directory Integration - Moderately critical - Information Disclosure - SA-CONTRIB-2026-115
- CVE-2026-75020 — Apache APISIX: ldap-auth plugin cross-subtree identity impersonation
- CVE-2026-19271 — Blind LDAP Injection in Sign-In Endpoint in TÜBİTAK BİLGEM's Liderahenk
- CVE-2026-76373 — Filter Injection through Action Parameters in AD LDAP app for Splunk SOAR
- CVE-2026-19930 — Dolibarr User Cloning card.php ldap injection
- CVE-2026-74241 — Quay: ldap referral filter injection in quay external ldap authentication
- CVE-2026-16071 — Keycloak-services: keycloak-services: ldap entry-dn user search bypasses configured users dn boundary