CVE-2026-79974VulnerabilityPublished 09/09/2026Updated 09/11/2026
CVE-2026-79974: CWE-287: Improper Authentication in Dell Secure Connect Gateway 5.0 - Application
Affects Dell Secure Connect Gateway 5.0 - ApplicationSource CVE Database V5
CVSS 3.1 base score
6.4Medium
- Exploitation
Not in CISA KEV, no exploitation reported
- EPSS
- 0.3% chance of exploitation in 30 days – higher than 21% of CVEs
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:NWhat to do
AI-suggested
Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until a patch is applied, restrict remote access to the affected Dell SCG 5.0 versions to trusted users only and monitor for suspicious authentication attempts.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| DellSecure Connect Gateway 5.0 - Application | Affected
| Fixed in
|
| DellSecure Connect Gateway 5.0 - Appliance | Affected
| Fixed in
|
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.