CVE-2026-78485 is a path traversal vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance versions prior to 5.36.00.00 and 5.36.00.16 respectively. The flaw involves improper limitation of a pathname to a restricted directory, allowing an unauthenticated attacker with remote access to potentially access unauthorized files. The vulnerability has a CVSS 3.1 base score of 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L), indicating it is remotely exploitable without privileges or user interaction and can lead to confidentiality, integrity, and availability impacts. The vendor has not yet provided an official fix or remediation level. The vulnerability is publicly disclosed but no active exploitation is known.

An unauthenticated remote attacker could exploit this path traversal vulnerability to gain unauthorized access to files or directories outside the intended restricted directory. This could lead to limited confidentiality, integrity, and availability impacts on the affected system. The CVSS score of 7.3 reflects the potential for significant impact if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the affected Dell Secure Connect Gateway 5.0 Application and Appliance instances to trusted networks only. Monitor for any vendor updates regarding patches or mitigations.