Advisoriesby IbisDell TechnologiesCVE-2026-79964
Dell Technologies Secure Connect Gateway 5.0: improper output encoding
Fix: upgrade to - Application 5.36.00.00 or later or later (2 fixed versions below)
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Escape, Meta, or Control Sequences vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to launch of phishing attacks.
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Secure Connect Gateway 5.0 - Appliance Product | < 5.36.00.16 or later | 5.36.00.16 or later |
| Secure Connect Gateway 5.0 - Application Product | < 5.36.00.00 or later | 5.36.00.00 or later |
Details and references
- CVSS 3.1
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- Severity from
- the vendor (its own CVE record or advisory)
- Weakness
- CWE-116