Secure Connect Gateway Scg 5 0 Application
Monthly
Unauthenticated OS command injection in Dell Secure Connect Gateway (SCG) 5.0 Application (versions prior to 5.36.00.00) exposes affected systems to remote code execution by any network-reachable attacker. The flaw (CWE-78) allows injection of shell metacharacters through an unspecified application input that is passed unsanitized to a system call, enabling arbitrary command execution on the gateway host. Dell has released version 5.36.00.00 via advisory DSA-2026-382; no public exploit code or CISA KEV listing has been identified at time of analysis.
Unauthenticated OS command injection in Dell Secure Connect Gateway (SCG) 5.0 Application (versions prior to 5.36.00.00) exposes affected systems to remote code execution by any network-reachable attacker. The flaw (CWE-78) allows injection of shell metacharacters through an unspecified application input that is passed unsanitized to a system call, enabling arbitrary command execution on the gateway host. Dell has released version 5.36.00.00 via advisory DSA-2026-382; no public exploit code or CISA KEV listing has been identified at time of analysis.