CVE-2026-79728: CWE-23: Relative Path Traversal in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
Not known to be exploited · CVSS 6.5 Medium : update Dell Secure Connect Gateway 5.0 - Application when convenient.
Data as of 10/24/2026, 17:08:27 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 24% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
A fix is available in Dell Secure Connect Gateway versions 5.36.00.16 (Appliance) and 5.36.00.00 (Application) or later. Users should upgrade to these versions to remediate the vulnerability. Patch status is confirmed by the version information provided. No additional vendor advisory content was provided, so check Dell's official security advisories for the latest remediation guidance.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.
Impact
Successful exploitation could allow an unauthenticated remote attacker to access files on the affected system's filesystem, potentially leading to unauthorized modification of data (high integrity impact). Confidentiality impact is low, and availability is not affected. There are no known exploits in the wild at this time.