Dell Secure Connect Gateway CVE-2026-79969

No special configuration is required beyond network reachability to the Dell SCG service. The CVSS vector specifies AV:N/AC:L/PR:N/UI:N, meaning unauthenticated remote exploitation against default-configured SCG 5.0 deployments. Exploitation is limited to SCG 5.0 Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00; patched versions are not affected. The impact is constrained to availability (denial of service); no credential theft or persistent compromise is described.

The provided CVSS vector (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N) contains a significant inconsistency: it asserts confidentiality impact (C:L) with no availability impact (A:N), yet the description and the 'Denial Of Service' tag both explicitly state DoS as the outcome. This contradiction suggests the vector may have been transposed from a different CVE in the same advisory (DSA-2026-382 covers multiple vulnerabilities). Based on the description, the realistic vector should reflect A:H with C:N. At AV:N/AC:L/PR:N/UI:N for a DoS primitive, the practical base score would be approximately 7.5, not 5.3. EPSS data is not provided; with no KEV listing and no POC, opportunistic exploitation is not currently confirmed. Real-world risk is moderate for environments exposing the SCG management interface to untrusted networks.

An unauthenticated attacker sends a high volume of concurrent requests to the SCG gateway endpoint, triggering unsynchronized access to a shared resource such as a connection table or session store. The resulting race condition corrupts internal state or exhausts available resources, causing the SCG service to become unresponsive and denying legitimate remote support connectivity to enterprise clients.