CVE-2026-79691: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79691 is an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) do not properly validate certificates, which could allow an unauthenticated remote attacker to bypass security protections. The vulnerability is classified under CWE-295 and has a CVSS 3.1 score of 7.3 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability.

An unauthenticated remote attacker could exploit this vulnerability to bypass protection mechanisms in Dell SCG 5.0, potentially leading to partial compromise of confidentiality, integrity, and availability of the affected system. The vulnerability affects both the appliance and application components prior to the specified fixed versions.

The vendor advisory does not provide explicit patch or remediation links. However, the description states that versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) are affected, implying that upgrading to these or later versions should remediate the issue. Patch status is not yet confirmed in the provided data; users should consult Dell's official security advisories for the latest remediation guidance.