CVE-2026-78481: CWE-321: Use of Hard-coded Cryptographic Key in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 26% of CVEs
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until an official fix is released, monitor vendor communications for updates. Avoid exposing vulnerable versions to untrusted networks if possible.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.
Summary
CVE-2026-78481 identifies a CWE-321 vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance where a hard-coded cryptographic key is used. This cryptographic weakness can be exploited by an attacker with low privileges and remote access to bypass security protections. The vulnerability affects versions prior to 5.36.00.00 for the Application and prior to 5.36.00.16 for the Appliance. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No known exploits are reported in the wild, and no vendor remediation level or patch information is currently available.
Impact
A low-privileged remote attacker could exploit the hard-coded cryptographic key vulnerability to bypass protection mechanisms, potentially compromising confidentiality. There is no reported impact on integrity or availability. No active exploitation has been observed.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.