Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Published: 2026-09-07
Score: 7.6 High
EPSS: < 1% Very Low
KEV: No
Impact: Unauthorized Access Due to Certificate Validation Failure
Action: Apply Patch
AI Analysis

Impact

Dell Secure Connect Gateway 5.0 is impacted by an improper certificate validation flaw (CWE‑295). The vulnerability permits an attacker who can reach the gateway over the network to bypass the certificate checks that normally enforce authentication, allowing unauthorized access to the appliance or application and potentially compromising confidentiality, integrity, or availability of the data and services handled by the gateway.

Affected Systems

Dell Secure Connect Gateway 5.0 Appliance versions earlier than 5.36.00.16 and Dell Secure Connect Gateway 5.0 Application versions earlier than 5.36.00.00 are affected. The flaw exists in both the appliance and application components and can be triggered via any remote interface exposed to the network.

Risk and Exploitability

The flaw carries a CVSS score of 7.6, indicating high severity. The EPSS score is not available, and the vulnerability is not currently listed in the CISA KEV catalog, suggesting no widespread exploitation has been reported. The attack vector is inferred to be network‑based remote access, as the description notes an unauthenticated attacker with remote access could potentially exploit the flaw. Immediate remediation is recommended.

Generated by OpenCVE AI on September 7, 2026 at 18:21 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply Dell’s security patch to upgrade the appliance to version 5.36.00.16 or later and the application to version 5.36.00.00 or later, as provided in Dell’s security update release.
  • Restrict external reachability of the gateway’s management and control interfaces by configuring firewall rules or VPN connections to allow access only from trusted networks.
  • If a patch cannot be applied immediately, enforce strict certificate chain validation on the gateway by rejecting self‑signed or expired certificates and disabling any legacy or fallback verification modes if supported.

Generated by OpenCVE AI on September 7, 2026 at 18:21 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 16 Sep 2026 01:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway
CPEs cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*
Vendors & Products Dell
Dell secure Connect Gateway

Tue, 08 Sep 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 07 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
Title Improper Certificate Validation in Dell Secure Connect Gateway 5.0 Enables Unauthorized Remote Access

Mon, 07 Sep 2026 16:45:00 +0000

Type Values Removed Values Added
Description Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Weaknesses CWE-295
References
Metrics cvssV3_1

{'score': 7.6, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L'}

Subscriptions

Dell Secure Connect Gateway
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-09-08T12:44:50.481Z

Reserved: 2026-08-25T10:35:45.860Z

Link: CVE-2026-79639

cve-icon Vulnrichment

Updated: 2026-09-08T12:44:44.349Z

cve-icon NVD

Status : Analyzed

Published: 2026-09-07T17:17:24.963

Modified: 2026-09-16T01:14:22.073

Link: CVE-2026-79639

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-09-07T18:30:03Z

Weaknesses
  • CWE-295

    Improper Certificate Validation