CVE-2026-79730: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 9% of CVEs
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Summary
CVE-2026-79730 is a TOCTOU race condition vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. This race condition occurs when the system checks a condition and then uses the result without proper synchronization, allowing an attacker with remote access and no authentication to potentially trigger a denial of service condition.
Impact
An unauthenticated attacker with remote access could exploit this race condition to cause denial of service, impacting availability. Confidentiality and integrity impacts are rated low by the CVSS vector, indicating limited or no direct data compromise.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.