Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Published: 2026-09-07
Score: 7.6 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Dell Secure Connect Gateway 5.0 is impacted by an improper certificate validation flaw (CWE‑295). The vulnerability permits an attacker who can reach the gateway over the network to bypass the certificate checks that normally enforce authentication, allowing unauthorized access to the appliance or application and potentially compromising confidentiality, integrity, or availability of the data and services handled by the gateway.

Affected Systems

Dell Secure Connect Gateway 5.0 Appliance versions earlier than 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions earlier than 5.36.00.00 are affected. The flaw exists in both the appliance and application components and can be triggered via any remote interface exposed to the network.

Risk and Exploitability

The flaw carries a CVSS score of 7.6, indicating high severity. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, suggesting no widespread exploitation has been reported. The attack vector is inferred to be network‑based remote access, as the description notes an unauthenticated attacker with remote access could potentially exploit the flaw. Immediate remediation is recommended.

Generated by OpenCVE AI on September 7, 2026 at 18:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Dell’s security patch to upgrade the appliance to version 5.36.00.16 or later and the application to version 5.36.00.00 or later, as provided in Dell’s security update release.
  • Restrict external reachability of the gateway’s management and control interfaces by configuring firewall rules or VPN connections to allow access only from trusted networks.
  • If a patch cannot be applied immediately, enforce strict certificate chain validation on the gateway by rejecting self‑signed or expired certificates and disabling any legacy or fallback verification modes if supported.

Generated by OpenCVE AI on September 7, 2026 at 18:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 07 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Title Improper Certificate Validation in Dell Secure Connect Gateway 5.0 Enables Unauthorized Remote Access

Mon, 07 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Weaknesses CWE-295
References
Metrics cvssV3_1

{'score': 7.6, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-07T16:27:08.096Z

Reserved: 2026-08-25T10:35:45.860Z

Link: CVE-2026-79639

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-09-07T17:17:24.963

Modified: 2026-09-07T17:17:24.963

Link: CVE-2026-79639

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-07T18:30:03Z

Weaknesses
  • CWE-295

    Improper Certificate Validation