CVE-2026-79738: CWE-798: Use of Hard-coded Credentials in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
Not known to be exploited · CVSS 7.5 High : patch Dell Secure Connect Gateway 5.0 - Application soon.
Data as of 10/24/2026, 17:08:27 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 33% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until an official fix is released, restrict remote access to the affected systems and monitor for unauthorized access attempts. Avoid exposing the affected Dell SCG 5.0 Appliance and Application to untrusted networks.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Credentials vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure.
Impact
An unauthenticated attacker with remote network access could exploit the hard-coded credentials to gain unauthorized access to the Dell Secure Connect Gateway 5.0 Appliance or Application, potentially exposing sensitive information. The vulnerability impacts confidentiality but does not affect integrity or availability. There are no known exploits in the wild at this time.