CVE-2026-79735
Analyzed Analyzed - Analysis Complete

Use of Hard-coded Cryptographic Key in Dell SCG 5.0

Vulnerability report for CVE-2026-79735, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-09
Last Modified
2026-09-09
Generated
2026-09-30
AI Q&A
2026-09-10
EPSS Evaluated
2026-09-27
NVD
EUVD

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
dell secure_connect_gateway to 5.36.00.00 (exc)
dell secure_connect_gateway to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-321 The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00 have a hard-coded cryptographic key. This flaw allows an unauthenticated remote attacker to exploit it and potentially access sensitive information.

Detection Guidance

Detection requires checking Dell SCG appliance and application versions. Verify if the installed versions are prior to 5.36.00.16 (appliance) or 5.36.00.00 (application). Use Dell's management interface or CLI commands like 'show version' or 'scg version' to confirm versions.

Impact Analysis

An attacker could exploit this to disclose confidential data, including user credentials or sensitive configuration details, without needing authentication.

Compliance Impact

This vulnerability could lead to unauthorized data access, violating GDPR's data protection requirements and HIPAA's safeguards for protected health information, potentially resulting in legal penalties and reputational damage.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the hard-coded cryptographic key vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-79735. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart