CVE-2026-78482 describes an OS command injection vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. This vulnerability arises from improper neutralization of special elements in OS commands (CWE-89). A low privileged attacker with local access could exploit this to execute arbitrary OS commands on the affected system. The vulnerability has a CVSS v3.1 base score of 5.5, with attack vector local, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact. No vendor advisory or patch information is currently provided, and no known exploits are reported.

Successful exploitation allows a low privileged local attacker to execute arbitrary OS commands on the affected Dell SCG 5.0 system. This could lead to unauthorized disclosure of information (high confidentiality impact). There is no reported impact on integrity or availability. The attack requires local access and low privileges, with no user interaction needed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users only and monitor for suspicious activity. Do not rely on generic mitigations as the vendor has not provided specific guidance or patches at this time.