CVE-2026-79950

Dell Secure Connect Gateway (SCG) 5.0 contains a use of hard-coded credentials flaw (CWE-798), meaning a fixed, embedded credential could grant access to the affected gateway. An unauthenticated attacker with network access to the gateway could exploit it remotely, with no user interaction or special conditions required. Per the CVSS score of 7.5, the impact is limited to confidentiality: the attacker could gain information exposure, with no integrity or availability impact. Users running Dell SCG 5.0 Appliance versions prior to 5.36.00.16 or Dell SCG 5.0 Application versions prior to 5.36.00.00 are affected. There are currently no known public proof-of-concept exploits, no reports of exploitation in the wild, and the issue is not yet listed in CISA's KEV catalog.

What to do: Upgrade Dell SCG 5.0 Appliance to 5.36.00.16 or later and Dell SCG 5.0 Application to 5.36.00.00 or later. Until patched, restrict network access to the SCG interface (e.g., limit it to trusted management networks via firewall rules) and identify any instances reachable from untrusted networks or the internet, since hard-coded credentials cannot be rotated or removed through configuration.