CVE-2026-79641 - Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

Back Back to CVE browser

HIGH

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability

Published Sep 9, 2026

7.5

HIGH

CVSS 3.1

EPSS 1.13%

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Affected products

Vendor Dell Product Secure Connect Gateway 5.0 - Appliance Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.36.00.16 or later
Vendor Dell Product Secure Connect Gateway 5.0 - Application Default
unaffected
- Version
  0
  Status
  affected
  Constraints
  <5.36.00.00 or later

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Dell

Secure Connect Gateway 5.0 - Appliance

unaffected

Version	Status	Constraints
0	affected	<5.36.00.16 or later

Dell

Secure Connect Gateway 5.0 - Application

unaffected

Version	Status	Constraints
0	affected	<5.36.00.00 or later

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74798
Advisory
https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities
vendor-advisoryVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-74798		Advisory
https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities		vendor-advisoryVendor Advisory