CVE-2026-61410 is a Missing Authorization vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance prior to versions 5.36.00.00 and 5.36.00.16 respectively. An unauthenticated attacker with remote access can exploit this flaw to execute arbitrary commands remotely by bypassing authorization checks. This vulnerability is critical due to its potential for remote code execution without any privileges or user interaction. The CVSS v3.1 base score is 9.4, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and high impact on confidentiality, integrity, and low impact on availability.

Successful exploitation allows an unauthenticated remote attacker to execute arbitrary commands on the target system, compromising confidentiality and integrity with potential limited impact on availability. This could lead to full system compromise or unauthorized control over the affected Dell SCG 5.0 Application or Appliance.

Dell recommends customers upgrade to versions 5.36.00.00 or later for the SCG 5.0 Application and 5.36.00.16 or later for the SCG 5.0 Appliance to remediate this vulnerability. Patch status is not explicitly confirmed in the advisory, but the vendor's upgrade recommendation indicates that fixed versions exist. Users should consult Dell's official advisory for the latest remediation guidance.