CVE-2026-79968: CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.2% chance of exploitation in 30 days – higher than 13% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:LWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until a fix is available, restricting remote access to the affected systems may reduce exposure.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Impact
An unauthenticated remote attacker could exploit this TOCTOU race condition to cause denial of service on affected Dell SCG 5.0 systems. The impact includes low confidentiality and integrity loss and low availability impact, consistent with the CVSS vector. There are no reports of active exploitation in the wild.
Summary
CVE-2026-79968 is a TOCTOU race condition vulnerability in Dell Secure Connect Gateway 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. This vulnerability allows an unauthenticated remote attacker to potentially cause denial of service by exploiting a timing issue between the check and use of a resource. The CVSS v3.1 base score is 5.6, indicating medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability at low to low levels.