6.5mediumMedium
CVE-2026-78488
Dell Secure Connect Gateway
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to command execution.
Exploitation status
- A vendor advisory or patch reference has been published.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, no special conditions are needed to exploit it.
- To exploit it, an ordinary user account is needed.
- Beyond that, no action by a user is required.
Scoring
- CVSS
- 6.5 (v3.1)
- Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N- Weakness
- CWE-78
- Assigned by
- security_alert@emc.com
Dates
- Published
- 2026-09-07
- Last modified
- 2026-09-11
- Sources
- NVD
Affected products
- Dell Secure Connect Gateway- 5.36.00.00, - 5.36.00.16
As listed in the NVD configuration data. Not a statement about your estate.