TI-2026-55295 Aliases CVE-2026-79941 GHSA-4f4c-f6w3-8rrm

Command injection in Dell Secure Connect Gateway 5.0 - Application

MEDIUM 56CWE-77Published 2026-09-09 · Updated 2026-09-11

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-77.

Summary

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.04725 91st percentileScored 2026-11-07

Fix Fixed Secure Connect Gateway 5.0 - Application (Dell): 5.36.00.00 or laterSecure Connect Gateway 5.0 - Appliance (Dell): 5.36.00.16 or later

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: Yes
Technical impact: Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dell	Secure Connect Gateway 5.0 - Application	before 5.36.00.00 or later	5.36.00.00 or later	Patch available	CNA
Dell	Secure Connect Gateway 5.0 - Appliance	before 5.36.00.16 or later	5.36.00.16 or later	Patch available	CNA

Secure Connect Gateway 5.0 - Application VendorDell Affected before 5.36.00.00 or later Fixed in 5.36.00.00 or later Patch available CNA
Secure Connect Gateway 5.0 - Appliance VendorDell Affected before 5.36.00.16 or later Fixed in 5.36.00.16 or later Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:dell:secure_connect_gateway:::::application:::*	before 5.36.00.00	Vulnerable	Dell
cpe:2.3:a:dell:secure_connect_gateway:::::virtual:::*	before 5.36.00.16	Vulnerable	Dell

cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:* Versions before 5.36.00.00 Vulnerable ·Dell
cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:* Versions before 5.36.00.16 Vulnerable ·Dell

Remediation

Fix · CNA Secure Connect Gateway 5.0 - Application (Dell) Fixed in 5.36.00.00 or later
Fix · CNA Secure Connect Gateway 5.0 - Appliance (Dell) Fixed in 5.36.00.16 or later

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

Advisory · 2026-09-07
Dell Secure Connect Gateway 5.0 - Appliance, Secure Connect Gateway 5.0 - Application — dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-securit…
73 records Highest priority Priority MEDIUM 8 MEDIUM, 65 LOW
Other records, highest priority first
- TI-2026-55185 OS command injection in Dell Secure Connect Gateway 5.0 - ApplicationPriority MEDIUM 56
- TI-2026-44025 Missing authorization in Dell Secure Connect Gateway 5.0 - ApplicationPriority MEDIUM 50
- TI-2026-55416 Insufficient verification of data authenticity in Dell Secure Connect Gateway 5.0…Priority MEDIUM 48
Show all 73 records → Advisory →

Timeline

2026-10-02 Threatist record created from CVE-2026-79941
2026-10-03 Alias added: GHSA-4f4c-f6w3-8rrm

References

Advisory 1

https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities

TI-2026-55185 OS command injection in Dell Secure Connect Gateway 5.0 - Application CVSS 3.1CRITICAL 9.8
TI-2026-44025 Missing authorization in Dell Secure Connect Gateway 5.0 - Application CVSS 3.1CRITICAL 9.4
TI-2026-55416 Insufficient verification of data authenticity in Dell Secure Connect Gateway 5.0… CVSS 3.1CRITICAL 9.8
TI-2026-55386 Path traversal in Dell Secure Connect Gateway 5.0 - Application CVSS 3.1CRITICAL 9.8
TI-2026-55384 Path traversal in Dell Secure Connect Gateway 5.0 - Application CVSS 3.1CRITICAL 9.8
TI-2026-55149 Missing authentication in Dell Secure Connect Gateway 5.0 - Application CVSS 3.1HIGH 8.2

See all 126 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences