by Kastro
Paper/Archive/CVE-2026-61410

CVE-2026-61410

Dell Secure Connect Gateway 5.0 - Application — Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authori…

EPSS 0.8%CVSS 9.4
critical.is priorityof 100
40
CVSS 9.4 (CNA)9.4 / 10 × 3028.2Not in CISA KEV+300.0EPSS percentile 58.1.581 × 2011.6No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerability is considered critical because it allows an attacker to execute commands remotely on a target system by sending a specially crafted request to the application, bypassing intended restrictions on code execution.Dell recommends customers to upgrade at the earliest opportunity.

Affected

ProductAffectedFixed inSource
Secure Connect Gateway 5.0 - Application< 5.36.00.00 or later5.36.00.00 or laterCNA
Secure Connect Gateway 5.0 - Appliance< 5.36.00.16 or later5.36.00.16 or laterCNA

Scores by source

dell (CNA)9.4CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorydell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities