CVE-2026-78487: CWE-321: Use of Hard-coded Cryptographic Key in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-78487 identifies a use of hard-coded cryptographic key vulnerability (CWE-321) in Dell Secure Connect Gateway 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. This vulnerability allows a low privileged local attacker to exploit the hard-coded key, potentially leading to information disclosure. The CVSS v3.1 base score is 5.5, reflecting a medium severity with attack vector local, low attack complexity, and no user interaction required. The vulnerability impacts confidentiality but not integrity or availability.

An attacker with local access and low privileges could exploit the hard-coded cryptographic key to disclose sensitive information. There is no indication of impact on integrity or availability. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official patch or fix links are provided in the available data. Users should monitor Dell's advisories for updates and apply patches once available. Until then, limit local access to trusted users only.