CVE-2026-79943: CWE-297: Improper Validation of Certificate with Host Mismatch in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79943 describes an improper validation of certificates with host mismatches in Dell Secure Connect Gateway 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. This vulnerability allows an unauthenticated attacker with remote access to potentially bypass security protections by exploiting the certificate validation flaw. The CVSS v3.1 base score is 4.8, reflecting a medium severity impact with low confidentiality and integrity impact and no availability impact. The attack vector is network-based, requiring high attack complexity and no privileges or user interaction.

An unauthenticated remote attacker could exploit this vulnerability to bypass protection mechanisms in Dell SCG 5.0, potentially compromising the integrity and confidentiality of communications or access controls. There is no indication of availability impact. No known exploits are reported in the wild at this time.

No explicit patch or remediation information is provided in the available data. Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until a patch is available, organizations should monitor vendor communications for updates and consider restricting remote access to affected versions where feasible.