CVE-2026-79691

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

CVSS v3 7.3 HIGH

7.3^/10

CVSS v3 : HIGH

Vector :

Exploitability : 3.9 / Impact : 3.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dell:secure_connect_gateway:::::application:::*
	cpe:2.3:a:dell:secure_connect_gateway:::::virtual:::*

History

No history.

Information

Published : 2026-09-07 16:17

Updated : 2026-09-16 01:15

NVD link : CVE-2026-79691

Mitre link : CVE-2026-79691

CVE.ORG link : CVE-2026-79691

JSON object : View

Products Affected

dell

secure_connect_gateway

CWE

CWE-295

Improper Certificate Validation

{"id": "CVE-2026-79691", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-79691", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-09-08T12:47:33.548195Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 3.4, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security_alert@emc.com", "affectedData": [{"vendor": "Dell", "product": "Secure Connect Gateway 5.0 - Application", "versions": [{"status": "affected", "version": "0", "lessThan": "5.36.00.00 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}, {"vendor": "Dell", "product": "Secure Connect Gateway 5.0 - Appliance", "versions": [{"status": "affected", "version": "0", "lessThan": "5.36.00.16 or later", "versionType": "semver"}], "defaultStatus": "unaffected"}]}], "published": "2026-09-07T16:17:29.440", "references": [{"url": "https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-295"}]}], "descriptions": [{"lang": "en", "value": "Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass."}], "lastModified": "2026-09-16T01:15:11.247", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*", "vulnerable": true, "matchCriteriaId": "7978D545-2FDA-4B19-B0A5-F87E87EE8A59", "versionEndExcluding": "5.36.00.00"}, {"criteria": "cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*", "vulnerable": true, "matchCriteriaId": "D6766A93-993A-40A7-9766-F830A1AE4C80", "versionEndExcluding": "5.36.00.16"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}