What is the CVSS score of CVE-2026-79692?

CVE-2026-79692 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.3%.

Which versions of Dell Secure Connect Gateway are affected by CVE-2026-79692?

Dell Secure Connect Gateway versions 5.0 and earlier contain a vulnerability allowing remote attackers to access sensitive files without authentication.. A patch is available.

How to fix or mitigate CVE-2026-79692?

Within 24 hours, identify all Dell Secure Connect Gateway instances in your environment and document their current versions. Within 7 days, apply Dell's security patch (version 5.36.00.16 for Appliance form factor or 5.36.00.00 for Application form factor) as detailed in advisory DSA-2026-382. Within 30 days, complete verification that all affected systems have been patched and conduct a file-access audit on SCG systems to detect any unauthorized access during the pre-patch window.

Dell Secure Connect Gateway CVE-2026-79692

EUVD-2026-74851 HIGH

External Control of File Name or Path (CWE-73)

2026-09-09 dell

GHSA-c3p7-52q3-7wcp

Information Disclosure Dell Secure Connect Gateway 5 0 Appliance Secure Connect Gateway 5 0 Application

7.3

CVSS 3.1 · Vendor: dell

Severity by source

Vendor (dell) PRIMARY

7.3 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

vuln.today AI

7.3 HIGH

Network-exposed, unauthenticated, no interaction required; limited C/I/A impact reflects path-control scope rather than full system compromise.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (dell).

CVSS VectorVendor: dell

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Sep 09, 2026 - 12:17 vuln.today

Patch available

Sep 09, 2026 - 12:03 EUVD

CVE Published

Sep 09, 2026 - 11:40 cve.org

HIGH 7.3

DescriptionCVE.org

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of File Name or Path vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access for attacker.

AnalysisAI

External control of file name or path (CWE-73) in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to influence filesystem path resolution, resulting in unauthorized filesystem access. Both the Appliance form factor (versions before 5.36.00.16) and the Application form factor (versions before 5.36.00.00) are affected. …

Unlock full vulnerability intelligence

Risk assessment & exploitation conditions
Attack chain visualization
Remediation with exact patch versions
Threat intelligence from 22 sources
Personal watchlist & email alerts

Continue with Google Continue with GitHub

Free forever · No credit card required

Vulnerability AssessmentAI

Exploitation	Remote network access to the Dell SCG 5.0 management or application interface is required. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment	The CVSS 7.3 base score is grounded in realistic impact: network-reachable, no authentication, no user interaction, but limited blast radius per metric (C:L/I:L/A:L rather than high across the board). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario	Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation	Upgrade Dell SCG 5.0 Appliance deployments to version 5.36.00.16 or later and Dell SCG 5.0 Application deployments to version 5.36.00.00 or later, as specified in Dell advisory DSA-2026-382 (https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities). … Detailed patch versions, workarounds, and compensating controls in full report.