CVE-2026-79643: CWE-480: Use of Incorrect Operator in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79643 identifies a Use of Incorrect Operator vulnerability in Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00. This vulnerability allows an unauthenticated attacker with remote access to potentially bypass security controls and gain unauthorized access. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) indicates network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is provided, so patch status is not confirmed.

An unauthenticated remote attacker could exploit this vulnerability to gain unauthorized access, potentially compromising confidentiality, integrity, and availability of the affected system. This could lead to data exposure, unauthorized actions, or service disruption on Dell SCG 5.0 deployments running vulnerable versions.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict remote access to the affected Dell SCG 5.0 Appliance and Application instances and monitor for suspicious activity. Follow Dell's official security advisories for updates.