Quick answers
- Is CVE-2026-79740 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-79740 being exploited in the wild.
- How severe is CVE-2026-79740?
- High severity, with a CVSS score of 7.5, published 9 September 2026.
- Which products and versions are affected?
- Dell Secure Connect Gateway 5.0 Appliance prior to 5.36.00.16 and 5.0 Application prior to 5.36.00.00.
- Is there a fix for CVE-2026-79740?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-79740 attacked?
- It is attacked over the network.
- Am I affected by CVE-2026-79740?
- Check whether you run Dell Secure Connect Gateway at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
The vulnerability is a use of hard-coded credentials issue in Dell SCG 5.0, allowing unauthenticated attackers with remote network access to authenticate without valid user credentials. By leveraging the embedded credentials, an attacker can bypass authentication controls and access administrative functions. The affected versions are Appliance prior to 5.36.00.16 and Application prior to 5.36.00.00. Patches are available in the indicated versions. This is part of a broader security advisory (DSA-2026-382) addressing multiple vulnerabilities in the same product.
Affected products
- Dell Secure Connect Gateway 5.0 Appliance prior to 5.36.00.16 and 5.0 Application prior to 5.36.00.00
Timeline
- 2026-09-09: disclosed: Published in NVD
- 2026-09-09: advisory: Dell DSA-2026-382 security update issued