CVE-2026-78480: CWE-306: Missing Authentication for Critical Function in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-78480 is a vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance where critical functions lack proper authentication controls. This missing authentication (CWE-306) allows unauthenticated remote attackers to exploit the flaw, potentially causing denial of service (availability impact). The vulnerability affects versions prior to 5.36.00.00 for the Application and prior to 5.36.00.16 for the Appliance. The CVSS v3.1 base score is 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and an impact limited to availability.

An unauthenticated remote attacker could exploit this vulnerability to disrupt the availability of the Dell Secure Connect Gateway 5.0 Application or Appliance by invoking critical functions without authentication. There is no indication of confidentiality or integrity impact. No known exploits in the wild have been reported.

Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's security advisories for updates. Until a fix is available, restrict remote access to the affected systems where possible to reduce exposure.