CVE-2026-79975: CWE-295: Improper Certificate Validation in Dell Secure Connect Gateway 5.0 - Application

CVE-2026-79975 describes an improper certificate validation vulnerability in Dell Secure Connect Gateway 5.0 Application and Appliance. Versions prior to 5.36.00.00 (Application) and 5.36.00.16 (Appliance) are affected. A low privileged local attacker could exploit this vulnerability to perform server-side request forgery (SSRF). The CVSS 3.1 vector indicates local attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no integrity or availability impact.

Successful exploitation could allow an attacker with local access and low privileges to induce the server to make unauthorized requests, potentially exposing sensitive information (confidentiality impact). There is no impact on integrity or availability reported. This could lead to unauthorized data disclosure within the affected environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Dell's advisories for updates. Until a fix is available, restrict local access to trusted users and environments to reduce risk.