CVE-2026-79974

Analyzed Analyzed - Analysis Complete

Improper Authentication in Dell SCG 5.0

Publication date: 2026-09-09

Last updated on: 2026-09-11

Assigner: Dell

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-09

Last Modified

2026-09-11

Generated

2026-09-29

AI Q&A

2026-09-09

EPSS Evaluated

2026-09-27

NVD

CVE-2026-79974

EUVD

EUVD-2026-74780

Affected Vendors & Products

Vendor	Product	Version / Range
dell	secure_connect_gateway	to 5.36.00.00 (exc)
dell	secure_connect_gateway	to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-287	When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Attack-Flow Graph

Executive Summary

This vulnerability is an Improper Authentication issue in Dell SCG 5.0 Appliance and Application versions before 5.36.00.16 and 5.36.00.00 respectively. It allows a low-privileged attacker with remote access to bypass authentication and gain unauthorized access to the system.

Detection Guidance

Detection requires checking the version of Dell SCG 5.0 Appliance or Application. If versions are prior to 5.36.00.16 (Appliance) or 5.36.00.00 (Application), the system is vulnerable. Use commands like 'show version' or 'scg version' on the appliance or application to verify the installed version.

Impact Analysis

An attacker could exploit this to gain unauthorized access to sensitive data or system functions. This may lead to data breaches, unauthorized modifications, or disruption of services if the attacker has sufficient privileges after access is obtained.

Compliance Impact

This vulnerability could lead to unauthorized access to personal or sensitive data, violating GDPR and HIPAA requirements for data protection and access controls. Organizations may face compliance violations, legal penalties, and reputational damage if exploited.

Mitigation Strategies

Update Dell SCG 5.0 Appliance to version 5.36.00.16 or later and Dell SCG 5.0 Application to version 5.36.00.00 or later to address the improper authentication vulnerability.

Hi! I’m here to help you understand CVE-2026-79974. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70