CVE-2026-79952 identifies an improper encoding or escaping of output vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance. This vulnerability allows an unauthenticated remote attacker to potentially exploit the system to launch phishing attacks. The issue affects versions prior to 5.36.00.00 for the application and prior to 5.36.00.16 for the appliance. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and limited confidentiality impact. No vendor advisory or patch information is currently available to confirm remediation status.

An unauthenticated attacker with remote access could exploit this vulnerability to facilitate phishing attacks, potentially deceiving users or systems interacting with the affected Dell Secure Connect Gateway 5.0. The confidentiality impact is limited, and there is no impact on integrity or availability according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should monitor Dell's advisories for updates and consider mitigating phishing risks through user awareness and email filtering solutions.