CVE-2026-61410
Received Received - Intake

Missing Authorization in Dell SCG 5.0 Appliance

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: Dell

Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerability is considered critical because it allows an attacker to execute commands remotely on a target system by sending a specially crafted request to the application, bypassing intended restrictions on code execution.Dell recommends customers to upgrade at the earliest opportunity.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-61410
EUVD
EUVD-2026-72364

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell scg to 5.36.00.16 (exc)
dell scg to 5.36.00.00 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-862 The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Missing Authorization vulnerability in Dell SCG 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. An unauthenticated attacker with remote access can exploit it to execute commands remotely by sending a specially crafted request, bypassing code execution restrictions. The vulnerability is critical due to its potential for remote command execution.

Detection Guidance

Detecting this vulnerability requires checking the version of Dell SCG 5.0 Appliance or Application. If the version is prior to 5.36.00.16 (Appliance) or 5.36.00.00 (Application), the system is vulnerable. Use commands like 'show version' or check the application's about section to verify the installed version.

Impact Analysis

An attacker could gain control of your system, execute malicious commands, steal data, or disrupt operations. Since no authentication is required, any system running vulnerable versions is at high risk of remote compromise.

Compliance Impact

This vulnerability could lead to unauthorized access and data breaches, violating GDPR and HIPAA requirements for data protection and access controls. Non-compliance may result in legal penalties, fines, and reputational damage.

Mitigation Strategies

Upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later immediately to address the Missing Authorization vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-61410. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart