vciy

Dell Secure Connect Gateway: 31 records in one advisory

31 records announced together, published 2026-09-07, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-…. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

All 31 records publish a fixed version.

No record in this batch is listed by CISA in held sources.

12 of 31 records name something of its own. For the other 19, held sources say the same thing about each.

Most commonly mapped weakness across the batch: CWE-295: Improper Certificate Validation.

What this page does not cover

Every record citing this advisory is on this page.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2026-78480no title heldCWE-306: Missing Authentication for Critical…
CVE-2026-78487no title heldCWE-321: Use of Hard-coded Cryptographic Key
CVE-2026-78488no title heldCWE-78: Improper Neutralization of Special…
CVE-2026-79639no title heldCWE-295: Improper Certificate Validation
CVE-2026-79642no title heldCWE-295: Improper Certificate Validation
CVE-2026-79643no title heldCWE-480: Use of Incorrect Operator
CVE-2026-79644no title heldCWE-295: Improper Certificate Validation
CVE-2026-79645no title heldCWE-306: Missing Authentication for Critical…
CVE-2026-79691no title heldCWE-295: Improper Certificate Validation
CVE-2026-79734no title heldCWE-295: Improper Certificate Validation
CVE-2026-79943mismatchCWE-297: Improper Validation of Certificate…
CVE-2026-79975server-side request forgeryCWE-295: Improper Certificate Validation
CVE-2026-80054permission assignment resourceCWE-732: Incorrect Permission Assignment for…
CVE-2026-80056insertion into log fileCWE-532: Insertion of Sensitive Information…
CVE-2026-80057no title heldCWE-321: Use of Hard-coded Cryptographic Key
CVE-2026-80058cleartextCWE-312: Cleartext Storage of Sensitive…
CVE-2026-80125no title heldCWE-295: Improper Certificate Validation
CVE-2026-80126locking filesystemCWE-667: Improper Locking
CVE-2026-80127highCWE-78: Improper Neutralization of Special…
CVE-2026-80128no title heldCWE-287: Improper Authentication
CVE-2026-80129no title heldCWE-22: Improper Limitation of a Pathname to a…
CVE-2026-80130relativeCWE-23: Relative Path Traversal
CVE-2026-80131no title heldCWE-22: Improper Limitation of a Pathname to a…
CVE-2026-80135check or handling exceptionalCWE-703: Improper Check or Handling of…
CVE-2026-80164no title heldCWE-295: Improper Certificate Validation
CVE-2026-80166no title heldCWE-269: Improper Privilege Management
CVE-2026-80167no title heldCWE-321: Use of Hard-coded Cryptographic Key
CVE-2026-80170credentialsCWE-798: Use of Hard-coded Credentials
CVE-2026-80176plaintext passwordCWE-257: Storing Passwords in a Recoverable…
CVE-2026-80178no title heldCWE-269: Improper Privilege Management
CVE-2026-80238unnecessary is considered becauseCWE-250: Execution with Unnecessary Privileges

31 records, read from the index as it stood on 2026-10-18. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.