CVE-2026-78492: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 14% of CVEs
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until a patch is available, consider restricting remote access to the affected systems and applying network-level controls to limit exposure.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Summary
CVE-2026-78492 identifies an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance versions prior to 5.36.00.00 and 5.36.00.16 respectively. This flaw could be exploited remotely by an unauthenticated attacker to bypass authentication mechanisms, potentially leading to unauthorized access. The vulnerability is classified under CWE-295, indicating a failure to properly validate certificates. The CVSS v3.1 score is 7.4, reflecting high impact on confidentiality and integrity with no impact on availability. No known exploits in the wild have been reported. No vendor patch links were provided in the input data.
Impact
Successful exploitation could allow an unauthenticated remote attacker to gain unauthorized access to the affected Dell SCG 5.0 Application or Appliance, compromising confidentiality and integrity of the system. Availability is not impacted according to the CVSS vector. This could lead to unauthorized actions or data exposure within the affected environment.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.