CVE-2026-79637: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 15% of CVEs
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:LWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Users should monitor Dell's official security advisories for updates and apply patches once available. Until then, restrict remote access to the affected systems where possible.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Summary
CVE-2026-79637 identifies an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. This vulnerability allows an unauthenticated attacker with remote access to exploit the certificate validation flaw, potentially leading to unauthorized access to the system. The CVSS 3.1 base score is 7.7, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality and integrity impact, and low availability impact.
Impact
Successful exploitation could allow an unauthenticated remote attacker to bypass certificate validation controls, leading to unauthorized access to the affected Dell SCG 5.0 system. This could compromise confidentiality and integrity of data and system operations. Availability impact is low.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.