CVE-2026-78490

Analyzed Analyzed - Analysis Complete

Improper Authentication Bypass in Dell SCG Appliance

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to client-side request forgery.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-78490

EUVD

EUVD-2026-74850

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-307	The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Restriction of Excessive Authentication Attempts issue in Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00. An unauthenticated attacker with remote access could exploit it to perform client-side request forgery.

Detection Guidance

Detection of this vulnerability requires checking the version of Dell SCG 5.0 Appliance or Application. Ensure your system is running Dell SCG 5.0 Appliance version 5.36.00.16 or higher, or Dell SCG 5.0 Application version 5.36.00.00 or higher. If versions are below these, the system is vulnerable.

Impact Analysis

An attacker could exploit this to forge client-side requests, potentially leading to unauthorized actions or data access on affected systems. This may result in compromised confidentiality or integrity of data.

Compliance Impact

This vulnerability could lead to unauthorized access or data breaches, which may violate compliance requirements such as GDPR or HIPAA. Organizations using affected versions may face regulatory penalties or legal consequences.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-78490. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70