Skip to main content

Dell SCG EUVDEUVD-2026-74896

| CVE-2026-79965 MEDIUM
Permissive Regular Expression (CWE-625)
2026-09-09 security_alert@emc.com GHSA-477q-3g2m-8gch
Authentication Bypass Dell Secure Connect Gateway
5.3
CVSS 3.1 · Vendor: emc
Share

Severity by source

Vendor (emc) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
vuln.today AI
5.3 MEDIUM

Network-reachable unauthenticated endpoint; no integrity or availability impact per description; C:L reflects partial read-only unauthorized data exposure.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Primary rating from Vendor (emc).

CVSS VectorVendor: emc

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

2
Patch available
Sep 09, 2026 - 13:49 EUVD
Analysis Generated
Sep 09, 2026 - 13:39 vuln.today

DescriptionCVE.org

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

AnalysisAI

External control of critical state data in Dell Secure Connect Gateway (SCG) 5.0 exposes sensitive information to remote unauthenticated attackers via network-accessible state manipulation. Affected are SCG 5.0 Appliance versions prior to 5.36.00.16 and SCG 5.0 Application versions prior to 5.36.00.00. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
technique details hidden
Exploit
technique details hidden
Execution
technique details hidden
Impact
technique details hidden
Sign in to reveal

Vulnerability AssessmentAI

Exploitation No authentication is required and no special client-side configuration is needed - exploitation requires only network-level reachability to the Dell SCG 5.0 Appliance or Application management interface. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The provided CVSS base score is 5.3 (Medium), with AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - network-reachable, low complexity, no credentials, no user interaction, but impact limited strictly to partial confidentiality. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario Full exploit scenario with step-by-step reproduction available after sign-in.
Remediation Vendor-released patches are available: upgrade Dell SCG 5.0 Appliance to version 5.36.00.16 or later, and Dell SCG 5.0 Application to version 5.36.00.00 or later, per DSA-2026-382 at https://www.dell.com/support/kbdoc/en-in/000503426. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Secure Connect Gateway

View all
CVE-2026-80238 CRITICAL
9.3 Sep 07

Local privilege escalation to root in Dell Secure Connect Gateway (SCG) 5.0 lets a low-privileged operator with SSH acce
CVE-2024-48016 HIGH
8.8 Oct 18

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains a Use of a Broken or Risky Cryptographi
CVE-2024-29168 HIGH
8.8 Jun 13

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal assets REST

CVE-2024-22457 HIGH
8.8 Mar 01

Dell Secure Connect Gateway 5.20 contains an improper authentication vulnerability during the SRS to SCG update path. Ra
CVE-2024-47241 HIGH
8.1 Oct 18

Dell Secure Connect Gateway (SCG) 5.0 Appliance - SRS, version(s) 5.24, contains an Improper Certificate Validation vuln
CVE-2024-29169 HIGH
8.1 Jun 13

Dell SCG, versions prior to 5.22.00.00, contain a SQL Injection Vulnerability in the SCG UI for an internal audit REST A
CVE-2026-80123 HIGH
7.5 Sep 09

Server-Side Request Forgery in Dell Secure Connect Gateway (SCG) 5.0 enables unauthenticated remote attackers to cause d
CVE-2026-79636 HIGH
7.0 Sep 09

Certificate hostname validation failure in Dell Secure Connect Gateway (SCG) 5.0 enables an unauthenticated remote attac
CVE-2026-80177 MEDIUM
6.5 Sep 09

SQL injection in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to extract sensitive data
CVE-2026-78481 MEDIUM
6.5 Sep 09

Hardcoded cryptographic key exposure in Dell Secure Connect Gateway (SCG) 5.0 allows a remote low-privileged attacker to
CVE-2023-28043 MEDIUM
6.5 Jun 01

Dell SCG 5.14 contains an information disclosure vulnerability during the SRS to SCG upgrade path. Rated medium severity
CVE-2025-46696 MEDIUM
6.4 Jan 06

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30, contain(s) an Executi

Same weakness CWE-625 – Permissive Regular Expression

View all
CVE-2026-64940 HIGH
8.8
CVE-2026-32973 HIGH
8.8
CVE-2018-8926 HIGH
8.8
CVE-2026-34830 HIGH
7.5
CVE-2026-19278 MEDIUM
6.8
CVE-2026-23651 MEDIUM
6.7
CVE-2020-8910 MEDIUM
6.5
CVE-2026-82726 MEDIUM
6.3

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

EUVD-2026-74896 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy