Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Published: 2026-09-07
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Access
Action: Immediate Patch
AI Analysis

Impact

The vulnerability is a missing authentication flaw for a critical function in Dell Secure Connect Gateway 5.0. It allows an attacker to bypass authentication controls and gain unauthorized access, potentially compromising the integrity of the appliance or application. The weakness is identified as CWE-306.

Affected Systems

The flaw affects Dell Secure Connect Gateway 5.0 Appliance versions earlier than 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions earlier than 5.36.00.00. Any deployment running those versions is susceptible.

Risk and Exploitability

With a CVSS score of 7.5 the vulnerability is considered high severity. The EPSS score is not available, so the likelihood of exploitation is unknown, but the vulnerability is not listed in CISA’s KEV catalog. The description indicates the flaw can be reached over remote access, meaning the attack vector is inferred to be network-based and requires no local privileges.

Generated by OpenCVE AI on September 7, 2026 at 15:24 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell security update that includes SCG-5.36.00.16 or later for the appliance and SCG-5.36.00.00 or later for the application.
  • Ensure that remote management interfaces are restricted by firewall rules or port blocking on untrusted networks.
  • If a patch cannot be applied immediately, isolate the appliance by disabling all unnecessary remote services and monitor for anomalous access attempts.

Generated by OpenCVE AI on September 7, 2026 at 15:24 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 11 Sep 2026 23:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell secure Connect Gateway

Tue, 08 Sep 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway Appliance
Dell secure Connect Gateway Application
Vendors & Products Dell
Dell secure Connect Gateway Appliance
Dell secure Connect Gateway Application

Tue, 08 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 07 Sep 2026 15:45:00 +0000

Type Values Removed Values Added
Title Missing Authentication Vulnerability in Dell Secure Connect Gateway 5.0

Mon, 07 Sep 2026 14:30:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}

Subscriptions

Dell Secure Connect Gateway Secure Connect Gateway Appliance Secure Connect Gateway Application
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-08T12:48:55.730Z

Reserved: 2026-08-24T17:05:26.109Z

Link: CVE-2026-78480

cve-icon Vulnrichment

Updated: 2026-09-08T12:48:46.255Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-07T15:17:31.670

Modified: 2026-09-11T21:23:03.420

Link: CVE-2026-78480

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-08T20:30:17Z

Weaknesses
  • CWE-306

    Missing Authentication for Critical Function