CVE-2026-79964 describes an improper neutralization of escape, meta, or control sequences vulnerability (CWE-116) in Dell Secure Connect Gateway 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. This vulnerability could be exploited remotely without authentication, potentially enabling attackers to conduct phishing attacks by leveraging improper output encoding or escaping. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact.

An unauthenticated remote attacker could exploit this vulnerability to launch phishing attacks, potentially deceiving users or systems interacting with the affected Dell SCG 5.0. The impact is limited to confidentiality with no direct integrity or availability effects reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or temporary workaround has been documented at this time. Users should monitor Dell's security advisories for updates and apply patches once available.