CVE-2026-79644: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79644 describes an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. This vulnerability allows an unauthenticated attacker with remote access to potentially bypass certificate validation mechanisms, leading to unauthorized access. The CVSS v3.1 score is 7.4, indicating high severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts confidentiality and integrity but not availability.

An unauthenticated remote attacker could exploit this vulnerability to gain unauthorized access to the affected Dell SCG 5.0 systems. The impact affects confidentiality and integrity, potentially allowing the attacker to compromise sensitive information or manipulate data. Availability is not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's security advisories for updates. Until a fix is available, restrict remote access to the affected systems and consider additional network-level protections to limit exposure.