CVE-2026-79941: Dell Secure Connect Gateway command injection

CVE-2026-79941 · Severity: medium · CVSS 5.3 · Published 2026-09-09

Dell Secure Connect Gateway (SCG) is a remote access appliance and application used to securely connect users to corporate resources. A command injection vulnerability in versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) allows unauthenticated attackers to inject arbitrary commands, potentially leading to script execution and full system compromise.

Technologies: Dell Secure Connect Gateway 5.0 Appliance, Dell Secure Connect Gateway 5.0 Application. Vendors: Dell.

Quick answers

Is CVE-2026-79941 exploited in the wild?
No. Junglewise Threat Intelligence has no report of CVE-2026-79941 being exploited in the wild.
How severe is CVE-2026-79941?
Medium severity, with a CVSS score of 5.3, published 9 September 2026.
Which products and versions are affected?
Dell Secure Connect Gateway 5.0 Appliance prior to 5.36.00.16; Dell Secure Connect Gateway 5.0 Application prior to 5.36.00.00.
Is there a fix for CVE-2026-79941?
A patch was published on 2026-09-09: Patches available: SCG 5.0 Appliance 5.36.00.16+, SCG 5.0 Application 5.36.00.00+ Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2026-79941 attacked?
It is attacked over the network.
Am I affected by CVE-2026-79941?
Check whether you run Dell Secure Connect Gateway 5.0 Appliance or Dell Secure Connect Gateway 5.0 Application at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

This vulnerability is an improper neutralization of special elements in command input (CWE-78: Command Injection). An unauthenticated attacker with network access can exploit this flaw by sending specially crafted input to the application, which fails to properly sanitize command parameters before execution. The attack vector is network-based with no authentication required and no user interaction needed. Successful exploitation allows script injection, which can lead to remote code execution depending on the privilege context. Patches are available in SCG 5.0 Appliance 5.36.00.16 and later, and SCG 5.0 Application 5.36.00.00 and later.

Affected products

  • Dell Secure Connect Gateway 5.0 Appliance prior to 5.36.00.16
  • Dell Secure Connect Gateway 5.0 Application prior to 5.36.00.00

Timeline

  • 2026-09-09: disclosed: Public disclosure via NVD and Dell advisory DSA-2026-382
  • 2026-09-09: patched: Patches available: SCG 5.0 Appliance 5.36.00.16+, SCG 5.0 Application 5.36.00.00+

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.