CVE-2026-79732

Analyzed Analyzed - Analysis Complete

Improper Certificate Validation in Dell Secure Connect Gateway

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell Secure Connect Gateway (SCG) 5.0 Appliance, versions prior to 5.36.00.xx, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79732

EUVD

EUVD-2026-75026

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-295	The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

Executive Summary

Dell Secure Connect Gateway (SCG) 5.0 Appliance before version 5.36.00.xx has an Improper Certificate Validation vulnerability. This means the system fails to properly verify digital certificates during secure connections, allowing an unauthenticated remote attacker to bypass security protections.

Detection Guidance

To detect this vulnerability, check the version of Dell Secure Connect Gateway (SCG) on your system. If the version is prior to 5.36.00.xx, the system is vulnerable. Use commands like 'show version' or 'scg version' depending on the appliance interface.

Impact Analysis

An attacker could exploit this to intercept or manipulate network traffic, potentially accessing sensitive data or disrupting services. However, the CVSS score of 3.7 indicates low impact, with limited confidentiality effects and no integrity or availability impact.

Compliance Impact

The vulnerability allows an unauthenticated attacker to bypass security protections, which could lead to unauthorized access to sensitive data. This may impact compliance with standards like GDPR and HIPAA by increasing the risk of data breaches and unauthorized disclosures.

Mitigation Strategies

Update Dell Secure Connect Gateway (SCG) 5.0 Appliance to version 5.36.00.xx or later to address the improper certificate validation vulnerability.

Hi! I’m here to help you understand CVE-2026-79732. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70