CVE-2026-78489 is an improper certificate validation vulnerability (CWE-295) affecting Dell Secure Connect Gateway 5.0 Application and Appliance versions prior to 5.36.00.00 and 5.36.00.16 respectively. An unauthenticated attacker with remote access could exploit this flaw to bypass security protections. The vulnerability has been publicly disclosed but no vendor advisory or patch information is currently available. The CVSS 3.1 base score is 5.9, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

An unauthenticated remote attacker could exploit the improper certificate validation to bypass protection mechanisms, potentially compromising confidentiality. There is no indication of integrity or availability impact. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, monitor vendor communications for updates. No specific mitigations are provided in the current data.