CVE-2026-79635: CWE-918: Server-Side Request Forgery (SSRF) in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 22% of CVEs
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until a patch is available, restrict remote access to the affected Dell SCG 5.0 components and monitor for unusual activity related to SSRF attempts.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Server-Side Request Forgery (SSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Summary
CVE-2026-79635 is a Server-Side Request Forgery (SSRF) vulnerability affecting Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00. An unauthenticated attacker with remote access could exploit this vulnerability to induce the server to make unintended requests, potentially leading to unauthorized access. The CVSS v3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability.
Impact
The vulnerability could allow an unauthenticated remote attacker to perform SSRF attacks, potentially leading to unauthorized access to internal resources or sensitive information. The impact includes partial loss of confidentiality, integrity, and availability as indicated by the CVSS vector. There is no indication of known exploits in the wild at this time.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.