Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-79689

Secure Connect Gateway 5.0 - Application · OS command injection

CVSS 3.1 5.3 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-79689

Published

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-79689

Published

Secure Connect Gateway 5.0 - Application

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Dell",
                    "product": "Secure Connect Gateway 5.0 - Application",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "5.36.00.00 or later",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Secure Connect Gateway 5.0 - Appliance

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Dell",
                    "product": "Secure Connect Gateway 5.0 - Appliance",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "5.36.00.16 or later",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON