CVE-2026-79692: CWE-73: External Control of File Name or Path in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
Not known to be exploited · CVSS 7.3 High : patch Dell Secure Connect Gateway 5.0 - Application soon.
Data as of 10/24/2026, 15:53:53 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 25% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until an official fix is released, restrict remote access to the affected systems and monitor for suspicious activity related to file path manipulation.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.
Impact
An unauthenticated remote attacker could exploit this vulnerability to gain unauthorized access to the filesystem of the affected Dell SCG 5.0 Application or Appliance. This could lead to partial compromise of confidentiality, integrity, and availability of the system. The high CVSS score reflects the potential severity of impact if exploited.