# CVE-2026-79944: Dell Secure Connect Gateway least privilege violation

Source: https://junglewise.ai/threats/cve-2026-79944-dell-secure-connect-gateway-least-privilege-violation  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-09. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-79944 · Severity: low · CVSS 3.4 · Published 2026-09-09

Dell Secure Connect Gateway (SCG) is a secure network connectivity appliance used to manage remote access and VPN tunnels for enterprise networks. A least privilege violation in SCG versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) could allow a high-privileged local attacker to gain unauthorized access beyond their assigned permissions, potentially leading to system compromise or lateral movement within the network.

Technologies: [Dell Secure Connect Gateway Appliance](https://junglewise.ai/threats/technologies/secure-connect-gateway-appliance), [Dell Secure Connect Gateway Application](https://junglewise.ai/threats/technologies/secure-connect-gateway-application). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-79944 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-79944 being exploited in the wild.

**How severe is CVE-2026-79944?** Low severity, with a CVSS score of 3.4, published 9 September 2026.

**Which products and versions are affected?** Dell Secure Connect Gateway Appliance prior to 5.36.00.16; Dell Secure Connect Gateway Application prior to 5.36.00.00.

**Is there a fix for CVE-2026-79944?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-79944 attacked?** It is attacked with local access, in a network appliance.

**Am I affected by CVE-2026-79944?** Check whether you run Dell Secure Connect Gateway Appliance or Dell Secure Connect Gateway Application at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

CVE-2026-79944 is a least privilege violation in Dell SCG affecting versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application). A high-privileged attacker with local access to the system can exploit this vulnerability to escalate or exceed their intended privilege level. The attack requires local access and elevated privileges as a precondition. The vulnerability allows unauthorized access beyond the attacker's assigned role or permission scope. Customers should upgrade to SCG 5.36.00.16 (appliance) or 5.36.00.00 (application) or later to remediate this issue.

## Affected products

- Dell Secure Connect Gateway Appliance prior to 5.36.00.16
- Dell Secure Connect Gateway Application prior to 5.36.00.00

## Timeline

- 2026-09-09: disclosed

## References

- [https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities](https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities)

## Related threats

- [Dell Secure Connect Gateway OS command injection vulnerability](https://junglewise.ai/threats/cve-2026-79947-dell-secure-connect-gateway-os-command-injection-vulnerability)
- [Dell Secure Connect Gateway OS command injection in local process](https://junglewise.ai/threats/cve-2026-79945-dell-secure-connect-gateway-os-command-injection-in-local-process)
- [Dell Secure Connect Gateway execution with unnecessary privileges](https://junglewise.ai/threats/cve-2026-79942-dell-secure-connect-gateway-execution-with-unnecessary-privileges)
- [Dell Secure Connect Gateway hard-coded cryptographic key](https://junglewise.ai/threats/cve-2026-79735-dell-secure-connect-gateway-hard-coded-cryptographic-key)
- [Dell Secure Connect Gateway privilege violation](https://junglewise.ai/threats/cve-2026-79693-dell-secure-connect-gateway-privilege-violation)