CVE-2025-26475 Auth bypass in Secure Connect Gateway (SCG) 5.0 Appliance - SRS

Medium 5.5 Published 19 Mar 2025 Updated 19 Mar 2025

An authentication bypass vulnerability in Dell Secure Connect Gateway allows attackers to circumvent security controls, potentially exposing the system to unauthorized access.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2025-26475?

CVE-2025-26475 is a medium-severity authentication bypass vulnerability in Dell Secure Connect Gateway, published on 19 Mar 2025. Any signed-in user can exploit it over the network, and only if a user opens a file or follows a link.

Official description

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.26, Enables Live-Restore setting which enhances security by keeping containers running during daemon restarts, reducing attack exposure, preventing accidental misconfigurations, and ensuring security controls remain active.

Weakness: CWE-287

Which versions are affected by CVE-2025-26475?

It affects 1 product.

Products include Dell Secure Connect Gateway.

How do I fix CVE-2025-26475?

No fix has been published for CVE-2025-26475 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2025-26475 being exploited?

There is no known exploitation of CVE-2025-26475 in the wild and no public exploit code.

All Dell Secure Connect Gateway vulnerabilities

Sources

Also known as GHSA-pj87-jxwm-9w7p.