CVE-2026-79971 describes an improper neutralization of formula elements vulnerability (CWE-1236) in Dell Secure Connect Gateway 5.0 Application and Appliance versions prior to 5.36.00.00 and 5.36.00.16 respectively. The vulnerability arises from insufficient sanitization of custom special characters in CSV files, which could be exploited by an unauthenticated attacker with remote access to inject scripts. This could lead to limited confidentiality impact but no integrity or availability impact is indicated. The vulnerability is rated medium severity with a CVSS 3.1 base score of 5.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N). No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

An unauthenticated remote attacker could exploit this vulnerability to inject scripts via specially crafted CSV files, potentially leading to limited confidentiality impact. There is no indication of integrity or availability impact. The vulnerability could be leveraged to execute malicious formulas or scripts when CSV files are processed by the affected application.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been published by Dell at this time. Users should monitor Dell's security advisories for updates and consider restricting access to the affected application until a patch is available.