CVE-2026-79640 is an SQL Injection vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. The vulnerability arises from improper neutralization of special elements in SQL commands, allowing a low privileged remote attacker to exploit the flaw and gain unauthorized access. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and limited confidentiality and integrity impact without availability impact.

An attacker with low privileges and remote access could exploit this vulnerability to perform unauthorized SQL commands, potentially leading to unauthorized access to data or system components. The impact is limited to confidentiality and integrity with no reported impact on availability. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or remediation level is provided, users should monitor Dell's security advisories for updates and apply any forthcoming patches promptly. Until then, restricting remote access and applying compensating controls to limit exposure may reduce risk.