CVE-2026-79961: CWE-306: Missing Authentication for Critical Function in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79961 is a vulnerability classified as CWE-306 (Missing Authentication for Critical Function) affecting Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) are vulnerable. The flaw allows unauthenticated remote attackers to potentially exploit critical functions without proper authentication, leading to unauthorized access. The CVSS v3.1 base score is 5.3, indicating medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. No vendor advisory or patch information is currently available.

An unauthenticated remote attacker could exploit this vulnerability to access critical functions without proper authentication, potentially leading to unauthorized access to the system. The impact is limited to confidentiality as per the CVSS vector, with no integrity or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict remote access to the affected Dell SCG 5.0 Application and Appliance versions and monitor for unusual activity related to critical functions.