CVE-2026-78490 identifies an improper restriction of excessive authentication attempts vulnerability (CWE-307) in Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) are affected. An unauthenticated attacker with remote access could exploit this weakness to perform client-side request forgery attacks. The vulnerability is rated high severity with a CVSS 3.1 base score of 7.5, indicating network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact. No vendor advisory or patch information is currently available, and no known exploits are reported in the wild.

Successful exploitation could allow an unauthenticated remote attacker to bypass authentication attempt restrictions, potentially leading to client-side request forgery. This could result in unauthorized access to sensitive information or actions performed on behalf of legitimate users. The confidentiality impact is high, while integrity and availability impacts are not indicated.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor for updates from Dell and consider implementing compensating controls such as network access restrictions to the affected systems. Avoid exposing the vulnerable versions to untrusted networks where possible.