CVE-2026-78488 is an OS Command Injection vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance versions prior to 5.36.00.00 and 5.36.00.16 respectively. The vulnerability arises from improper neutralization of special elements used in OS commands (CWE-78). A remote attacker with low privileges could exploit this flaw to execute arbitrary OS commands on the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

Successful exploitation could lead to unauthorized OS command execution by a low privileged remote attacker, potentially compromising confidentiality of the affected system. There is no indication of integrity or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor Dell's advisories for updates. Until a patch is available, restrict remote access to the affected systems to trusted users only and apply network-level controls to limit exposure.