CVE-2026-79728

Analyzed Analyzed - Analysis Complete

Relative Path Traversal in Dell SCG 5.0 Appliance

Publication date: 2026-09-09

Last updated on: 2026-09-14

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-14

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79728

EUVD

EUVD-2026-74889

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-23	The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.

Attack-Flow Graph

Executive Summary

Dell SCG versions before 5.36.00.16 (Appliance) and 5.36.00.00 (Application) have a Relative Path Traversal flaw. This allows unauthenticated remote attackers to access files on the system by manipulating file paths.

Detection Guidance

This vulnerability involves a Relative Path Traversal in Dell SCG 5.0 Appliance and Application versions prior to 5.36.00.16 and 5.36.00.00 respectively. Detection requires checking the installed versions of Dell SCG 5.0 Appliance and Application. If versions are below 5.36.00.16 or 5.36.00.00, the system is vulnerable. Use commands like 'rpm -qa | grep secure_connect_gateway' on Linux or check installed programs via Control Panel on Windows to verify versions.

Impact Analysis

An attacker could read sensitive files, steal data, or gain unauthorized access to system resources. This may lead to data breaches, service disruption, or further attacks on the network.

Compliance Impact

This vulnerability could violate GDPR (data protection) and HIPAA (health data privacy) by exposing sensitive information. Organizations may face legal penalties, fines, or reputational damage if exploited.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the Relative Path Traversal vulnerability.

Hi! I’m here to help you understand CVE-2026-79728. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70