{"id":"CVE-2026-79965","state":"PUBLISHED","title":"Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An","description":"Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.","publishedAt":"2026-09-09T12:51:15.442Z","updatedAt":"2026-09-09T13:05:51.858Z","severity":{"score":5.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","source":"dell"},"assigner":"dell","products":["Dell Secure Connect Gateway 5.0 - Application","Dell Secure Connect Gateway 5.0 - Appliance"],"affected":[{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Application","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.00 or later","versionType":"semver"}]},{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Appliance","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.16 or later","versionType":"semver"}]}],"references":["https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities"],"weaknesses":["CWE-625"],"ingestedAt":"2026-10-29T20:13:07.220Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/79xxx/CVE-2026-79965.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-79965","state":"PUBLISHED","datePublished":"2026-09-09T12:51:15.442Z","dateUpdated":"2026-09-09T13:05:51.858Z","assignerShortName":"dell","assignerOrgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateReserved":"2026-08-25T16:04:25.341Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an External Control of Critical State Data vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access."}],"affected":[{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Application","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.00 or later","versionType":"semver"}]},{"vendor":"Dell","product":"Secure Connect Gateway 5.0 - Appliance","defaultStatus":"unaffected","versions":[{"version":"0","status":"affected","lessThan":"5.36.00.16 or later","versionType":"semver"}]}],"references":[{"url":"https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities","tags":["vendor-advisory"]}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-625","lang":"en","description":"CWE-625: Permissive Regular Expression","type":"CWE"}]}],"providerMetadata":{"shortName":"dell","orgId":"c550e75a-17ff-4988-97f0-544cde3820fe","dateUpdated":"2026-09-09T12:51:15.442Z"},"datePublic":"2026-08-31T06:30:00.000Z","source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 1.0.5"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-09-09T13:04:07.014591Z","id":"CVE-2026-79965","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-09-09T13:05:51.858Z"}}]}}}