CVE-2026-79639: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79639 is an improper certificate validation vulnerability affecting Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00. The vulnerability allows an unauthenticated attacker with remote access to potentially bypass certificate validation controls, leading to unauthorized access. The CVSS 3.1 base score is 7.6, indicating high severity, with attack vector as adjacent network, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality and availability impacts with low integrity impact.

An unauthenticated remote attacker could exploit this vulnerability to gain unauthorized access to the Dell Secure Connect Gateway 5.0 environment. This could compromise confidentiality and availability of the system. The integrity impact is low. There are no known exploits in the wild at the time of publication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's official security advisories for updates and apply any released patches promptly. Until a fix is available, consider restricting remote access to the affected components to trusted networks only.