EUVD-2026-72361
GHSA-x3f6-wj52-5x3w
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CWE-78 OS command injection with no auth and no user interaction typically yields full C/I/A impact absent confirmed sandboxing evidence.
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
AnalysisAI
Unauthenticated OS command injection in Dell Secure Connect Gateway (SCG) 5.0 Application (versions prior to 5.36.00.00) exposes affected systems to remote code execution by any network-reachable attacker. The flaw (CWE-78) allows injection of shell metacharacters through an unspecified application input that is passed unsanitized to a system call, enabling arbitrary command execution on the gateway host. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | No authentication is required - the CVSS vector PR:N confirms unauthenticated exploitation is possible. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS vector AV:N/AC:L/PR:N/UI:N signals low-friction, unauthenticated, network-reachable exploitation with no user interaction - a strong attacker-favoring profile. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Upgrade Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance to version 5.36.00.00 or later, as documented in Dell security advisory DSA-2026-382 (https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities). … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours, conduct a complete inventory of all Dell Secure Connect Gateway deployments and determine which systems run vulnerable versions prior to 5.36.00.00. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-78 – OS Command Injection
View allSame technique Command Injection
View allShare
External POC / Exploit Code
Leaving vuln.today