CVE-2026-79637: Dell Secure Connect Gateway improper certificate validation

CVE-2026-79637 · Severity: high · CVSS 7.7 · Published 2026-09-09

Dell Secure Connect Gateway is a network security appliance and application used to control and monitor remote access to corporate networks. The vulnerability allows unauthenticated attackers to bypass certificate validation checks over the network, potentially enabling man-in-the-middle attacks to intercept sensitive communications or gain unauthorized access to the system.

Technologies: Dell Secure Connect Gateway 5.0 Appliance, Dell Secure Connect Gateway 5.0 Application. Vendors: Dell.

Quick answers

Is CVE-2026-79637 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-79637 being exploited in the wild.
How severe is CVE-2026-79637?
High severity, with a CVSS score of 7.7, published 9 September 2026.
Which products and versions are affected?
Dell Secure Connect Gateway 5.0 Appliance prior to 5.36.00.16; Dell Secure Connect Gateway 5.0 Application prior to 5.36.00.00.
Is there a fix for CVE-2026-79637?
A patch was published: Patches available: SCG 5.0 Appliance 5.36.00.16 and SCG 5.0 Application 5.36.00.00 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-79637 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-79637?
Check whether you run Dell Secure Connect Gateway 5.0 Appliance or Dell Secure Connect Gateway 5.0 Application at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability (CVE-2026-79637) is an improper certificate validation flaw in the Secure Connect Gateway SSL/TLS implementation. An unauthenticated attacker with network access can exploit the weak certificate validation logic to bypass certificate checks during remote connections. The attack requires no user interaction, authentication, or local access. By successfully exploiting this, an attacker can establish unauthorized encrypted channels, potentially leading to unauthorized access to the system and interception of sensitive data. Dell released patches addressing this issue in SCG 5.0 Appliance 5.36.00.16 and SCG 5.0 Application 5.36.00.00.

Affected products

  • Dell Secure Connect Gateway 5.0 Appliance prior to 5.36.00.16
  • Dell Secure Connect Gateway 5.0 Application prior to 5.36.00.00

Timeline

  • 2026-09-09: disclosed
  • patched: Patches available: SCG 5.0 Appliance 5.36.00.16 and SCG 5.0 Application 5.36.00.00

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.