CVE-2026-79946

Analyzed Analyzed - Analysis Complete

Improper Neutralization of Alternate XSS in Dell SCG Appliance

Publication date: 2026-09-09

Last updated on: 2026-09-14

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-14

Generated

2026-09-30

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79946

EUVD

EUVD-2026-75046

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-87	The product does not neutralize or incorrectly neutralizes user-controlled input for alternate script syntax.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Neutralization of Alternate XSS Syntax issue in Dell SCG 5.0 Appliance versions before 5.36.00.16 and Dell SCG 5.0 Application versions before 5.36.00.00. It allows an unauthenticated remote attacker to inject malicious scripts.

Detection Guidance

Detection of this vulnerability requires checking the version of Dell SCG 5.0 Appliance or Application. Versions prior to 5.36.00.16 (Appliance) or 5.36.00.00 (Application) are vulnerable. Use commands like 'show version' or 'scg version' in the appliance CLI or check application logs for version details.

Impact Analysis

An attacker could exploit this to execute malicious scripts in your browser when accessing the vulnerable Dell SCG interface. This could lead to session hijacking, data theft, or unauthorized actions on your behalf.

Compliance Impact

This vulnerability could expose sensitive data, potentially violating GDPR (data protection) and HIPAA (healthcare data privacy) by allowing unauthorized access or data breaches. Compliance may be impacted if exploited.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the XSS vulnerability.

Hi! I’m here to help you understand CVE-2026-79946. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70