CVE-2026-78494VulnerabilityPublished 09/09/2026Updated 09/11/2026
CVE-2026-78494: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
CVSS 3.1 base score
7.4High
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 14% of CVEs
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NWhat to do
AI-suggested
Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's security advisories for updates. Until a fix is available, restrict remote access to the affected systems where possible to reduce exposure.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.