CVE-2026-79961: CWE-306: Missing Authentication for Critical Function in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
Not known to be exploited · CVSS 5.3 Medium : update Dell Secure Connect Gateway 5.0 - Application when convenient.
Data as of 10/24/2026, 17:08:27 UTC
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 32% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until an official fix is released, restrict remote access to the affected Dell SCG 5.0 Application and Appliance versions and monitor for unusual activity related to critical functions.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Impact
An unauthenticated remote attacker could exploit this vulnerability to access critical functions without proper authentication, potentially leading to unauthorized access to the system. The impact is limited to confidentiality as per the CVSS vector, with no integrity or availability impact reported.