CVE-2026-79967VulnerabilityPublished 09/09/2026

CVE-2026-79967: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5

CVSS 3.1 base score

5.6Medium

Exploitation: Not in CISA KEV, no exploitation reported
EPSS: 0.2% chance of exploitation in 30 days – higher than 4% of CVEs

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

What to do

AI-suggested

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations are provided by the vendor at this time.

Affected software

Product	Affected	Fixed in
DellSecure Connect Gateway 5.0 - Application	Affected =0	Fixed in 5.36.00.00 or later
DellSecure Connect Gateway 5.0 - Appliance	Affected =0	Fixed in 5.36.00.16 or later

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

Summary

CVE-2026-79967 describes an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Appliance (versions prior to 5.36.00.16) and Application (versions prior to 5.36.00.00). This vulnerability allows an unauthenticated attacker with remote access to potentially bypass security protections by exploiting the certificate validation weakness. The CVSS v3.1 base score is 5.6, reflecting a medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability at a low level. No vendor advisory or patch information is currently provided, and no known exploits have been reported.

Impact

An unauthenticated remote attacker could exploit the improper certificate validation to bypass protection mechanisms, potentially leading to limited confidentiality, integrity, and availability impacts. The medium CVSS score indicates moderate risk but no confirmed active exploitation is known.

Weaknesses

CWE-295Improper Certificate Validation (opens in a new tab)

References

dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities (opens in a new tab)

What to do

Affected software

Description

AnalysisAI-generated, updated 09/09/2026, 09:07:50 UTC

Technical details

Weaknesses

References

Related threats