CVE-2026-79966: CWE-532: Insertion of Sensitive Information into Log File in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 2% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until an official fix is released, restrict local access to trusted users only and monitor for unauthorized access to log files.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.
Impact
The vulnerability allows exposure of sensitive information through log files, which could be accessed by an attacker with low privileges and local access. The impact is limited to confidentiality with no integrity or availability effects. There are no known exploits in the wild at this time.
Summary
CVE-2026-79966 describes an insertion of sensitive information into log files vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) are affected. A low privileged attacker with local access could exploit this flaw to gain access to sensitive information recorded in logs. The vulnerability is categorized under CWE-532 and has a CVSS 3.1 base score of 3.3, reflecting low confidentiality impact without integrity or availability impact. No vendor advisory or patch information is currently available.