CVE-2026-79969: CWE-567: Unsynchronized Access to Shared Data in a Multithreaded Context in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 22% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
Until a fix is available, consider limiting remote access to the affected systems to trusted users only.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to denial of service.
Impact
An unauthenticated remote attacker could exploit this race condition to cause a denial of service, impacting availability of the Dell Secure Connect Gateway 5.0 Application or Appliance. Confidentiality and integrity impacts are rated low or none according to the CVSS vector.
Summary
CVE-2026-79969 identifies a race condition vulnerability (CWE-567) in Dell Secure Connect Gateway 5.0 Application and Appliance. The issue arises from concurrent execution using shared resources without proper synchronization, allowing an unauthenticated remote attacker to potentially trigger a denial of service condition. The vulnerability affects versions prior to 5.36.00.00 for the Application and prior to 5.36.00.16 for the Appliance. No known exploits are reported in the wild, and no vendor advisory or patch information is currently available.