CVE-2026-79972: CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.4% chance of exploitation in 30 days – higher than 37% of CVEs
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWhat to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
AI-suggested
The vendor has identified the affected versions but no explicit patch or remediation information is provided in the available data. Until a patch is available, restrict remote access to high privileged users and monitor for suspicious activity related to SQL commands.
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Summary
CVE-2026-79972 is an SQL Injection vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) improperly neutralize special elements in SQL commands, allowing a high privileged remote attacker to execute unauthorized SQL queries. This can lead to unauthorized access and compromise of confidentiality, integrity, and availability of the affected system. The vulnerability has a CVSS v3.1 base score of 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
Impact
Successful exploitation could allow a high privileged remote attacker to execute arbitrary SQL commands, potentially leading to unauthorized access to sensitive data, modification of data, and disruption of service. The impact affects confidentiality, integrity, and availability of the affected system.
Weaknesses
References
Community reviews
Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.