Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to command execution.
Published: 2026-09-09
Score: 5.5 Medium
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability is an OS command injection flaw that allows a low privileged attacker with local access to execute arbitrary operating system commands. The flaw arises from improper handling of special characters, enabling the attacker to inject commands into the system shell. Successful exploitation would compromise the confidentiality, integrity, or availability of the affected system depending on the commands run.

Affected Systems

Dell Secure Connect Gateway 5.0 Appliance versions prior to 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions prior to 5.36.00.00 are affected. The product names are Dell Secure Connect Gateway 5.0 Appliance and Dell Secure Connect Gateway 5.0 Application.

Risk and Exploitability

The CVSS score of 5.5 indicates moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA KEV. A local attacker with low privileges can exploit the flaw, but remote exploitation is not indicated. The risk is limited to systems where local access is possible and the attacker can reach the vulnerable code.

Generated by OpenCVE AI on September 9, 2026 at 16:00 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Update the Secure Connect Gateway Appliance to version 5.36.00.16 or later.
  • Update the Secure Connect Gateway Application to version 5.36.00.00 or later.
  • If an immediate update is not possible, limit local access to trusted administrators and enforce strict OS-level permissions to prevent untrusted processes from executing shell commands.

Generated by OpenCVE AI on September 9, 2026 at 16:00 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 09 Sep 2026 17:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 09 Sep 2026 16:15:00 +0000

Type Values Removed Values Added
Title Local OS Command Injection in Dell Secure Connect Gateway 5.0

Wed, 09 Sep 2026 14:45:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to command execution.
Weaknesses CWE-89
References
Metrics cvssV3_1

{'score': 5.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-09T15:56:56.857Z

Reserved: 2026-08-24T17:05:26.109Z

Link: CVE-2026-78482

cve-icon Vulnrichment

Updated: 2026-09-09T15:56:53.074Z

cve-icon NVD

Status : Undergoing Analysis

Published: 2026-09-09T15:17:08.763

Modified: 2026-09-09T16:17:06.207

Link: CVE-2026-78482

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-09T16:00:17Z

Weaknesses
  • CWE-89

    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')