CVE-2026-79734: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79734 is an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application. Versions prior to 5.36.00.16 (Appliance) and 5.36.00.00 (Application) are affected. An unauthenticated attacker with remote access could exploit this flaw to bypass security protections. The vulnerability is categorized under CWE-295 and has a CVSS v3.1 base score of 5.9, indicating medium severity. No vendor patch or advisory details are provided in the input data.

Successful exploitation could allow an unauthenticated remote attacker to bypass security mechanisms relying on certificate validation, potentially undermining the trust model of the affected product. The impact is limited to confidentiality as per the CVSS vector (C:H, I:N, A:N), meaning sensitive information could be exposed but integrity and availability are not affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor Dell's security advisories for updates and consider restricting remote access to the affected components to trusted networks only.