CyberICT

CVE-2026-79941

Dell · Published September 9, 2026

CVSS v3.1

CRITICAL
Patch availableGet patch

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

Affected Products

  • Secure Connect Gateway < 5.36.00.00
  • Secure Connect Gateway < 5.36.00.16

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H