Skip to content
CVE PROGRAM SOURCE RECORD7.3 High

CVE-2026-61409

Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injectio

Description

Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Secure Connect Gateway (SCG) 5.0 Application

Default version status: unaffected

  • 0 to < 5.36.00.00 or lateraffected

Dell Secure Connect Gateway 5.0 - Appliance

Default version status: unaffected

  • 0 to < 5.36.00.16 or lateraffected

References