CVE-2026-79963: CWE-494: Download of Code Without Integrity Check in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 17% of CVEs
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:HWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until a fix is available, restrict remote access to the affected systems and consider additional network-level protections to limit exposure.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution.
Summary
CVE-2026-79963 describes a Download of Code Without Integrity Check vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) are affected. An unauthenticated attacker with remote access could exploit this flaw to execute arbitrary commands due to the lack of integrity verification on downloaded code. The CVSS v3.1 base score is 7.4, indicating high severity, with attack vector network, high attack complexity, no privileges required, no user interaction, and impact on integrity and availability.
Impact
Successful exploitation could lead to remote command execution by an unauthenticated attacker, compromising the integrity and availability of the affected system. Confidentiality impact is not indicated. This could result in unauthorized control over the device or disruption of its services.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.