CVE-2026-79966

Analyzed Analyzed - Analysis Complete

Dell SCG Log File Information Exposure Vulnerability

Publication date: 2026-09-09

Last updated on: 2026-09-09

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Insertion of Sensitive Information into Log File vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to information exposure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-09

Generated

2026-09-29

AI Q&A

2026-09-10

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79966

EUVD

EUVD-2026-74895

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-532	The product writes sensitive information to a log file.

Attack-Flow Graph

Executive Summary

Dell SCG versions before 5.36.00.16 (Appliance) and 5.36.00.00 (Application) have a flaw where sensitive information is logged improperly. A low-privileged attacker with local access could exploit this to expose sensitive data through log files.

Detection Guidance

Detection of this vulnerability requires checking for sensitive information logged in files on systems running Dell SCG 5.0 Appliance versions prior to 5.36.00.16 or Dell SCG 5.0 Application versions prior to 5.36.00.00. Review application logs for unintended exposure of credentials or sensitive data. No specific commands are provided in the context.

Impact Analysis

If exploited, this vulnerability could lead to unauthorized access to sensitive information stored in log files. This may include credentials, system details, or other confidential data, potentially enabling further attacks or compliance violations.

Compliance Impact

This vulnerability could result in unauthorized exposure of personal or sensitive data, violating GDPR and HIPAA requirements for data protection and confidentiality. Organizations may face legal penalties or reputational damage.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the vulnerability.

Hi! I’m here to help you understand CVE-2026-79966. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70