Dell Secure Connect Gateway CVE-2026-79729

Exploitation requires the attacker to achieve a network man-in-the-middle position between the Dell Secure Connect Gateway and a remote TLS endpoint - this is the AC:H condition in the CVSS vector. The attacker requires no credentials (PR:N) and no user interaction (UI:N). Exploitation is limited by: (1) the requirement to intercept or redirect network traffic on the same path as the SCG's outbound connections, which is significantly harder in managed enterprise networks with static ARP, 802.1X, or encrypted VLANs; (2) impact is scoped to confidentiality only (I:N, A:N), meaning the attacker can observe but not modify intercepted data per the provided CVSS; (3) both deployment forms (Appliance and Application) are affected equally. No special application-level configuration or feature enablement is identified as a prerequisite beyond running an unpatched version of the product.

The CVSS base score of 3.7 (Low) with vector AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N accurately reflects constrained real-world risk. The high attack complexity (AC:H) is the primary limiting factor, as exploitation requires the attacker to successfully position themselves in the network path between the SCG and a remote system - a non-trivial prerequisite in typical enterprise network segments with managed routing and segmentation. Confidentiality impact is rated Low, indicating partial or limited data exposure rather than full credential or session capture. No EPSS data, no CISA KEV listing, and no public proof-of-concept are present in the available intelligence, all of which further reduce operational urgency. While the vulnerability is real and patchable, it does not represent an immediate high-priority emergency; organizations with strong network segmentation and monitoring are at lower effective risk. The 'Authentication Bypass' tag in the input metadata is a mislabel - CWE-295 describes certificate validation failure enabling MITM interception, not an authentication mechanism bypass.

An attacker with access to the same network segment as a Dell Secure Connect Gateway - for example, an insider or a compromised adjacent host - positions themselves in the network path using ARP spoofing or similar techniques. When the SCG initiates an outbound TLS connection (e.g., to a Dell support backend), the attacker presents a forged certificate that the SCG accepts without proper validation, enabling the attacker to decrypt and read the transmitted data. No public proof-of-concept code is known at time of analysis.