CVE-2026-79689 is a medium severity (CVSS 5.3) OS command injection in Dell Secure Connect Gateway 5.0. Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00 are affected. Update to those builds or later, as set out in Dell advisory DSA-2026-382.
What's affected
- Product: Dell Secure Connect Gateway (SCG) 5.0.
- Affected: Dell SCG 5.0 Appliance versions prior to 5.36.00.16, and Dell SCG 5.0 Application versions prior to 5.36.00.00.
- Fixed: Appliance 5.36.00.16 and Application 5.36.00.00, or later. Dell's page would not load for me, so confirm the details in DSA-2026-382.
- Weakness: CWE-78, improper neutralization of special elements used in an OS command.
- CVSS 5.3 (medium), vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. Dell lists the outcome as script injection. Not listed in CISA KEV.
How to check if you're exposed
Find your Secure Connect Gateway deployments and read the version in the admin interface. Appliance builds need 5.36.00.16 or later, and the Application build needs 5.36.00.00 or later.
Then check who can reach the service. The record says an unauthenticated attacker with remote access could use this flaw, so network reach is the main factor. Find firewall rules or proxies that expose it beyond the networks that need it.
What to do now
- Find every Dell SCG appliance and application install and its version.
- Update to Appliance 5.36.00.16 or Application 5.36.00.00, or later, per Dell advisory DSA-2026-382.
- Restrict network access to the gateway to the networks that need it.
- Read DSA-2026-382 for the other CVEs fixed in the same update, since one upgrade covers them.
Why it matters
Command injection means data reaches an operating system command without being neutralized. Dell's text says an unauthenticated attacker with remote access could use it, with script injection as the outcome.
The score is medium, but a gateway that sits between you and a vendor support service deserves quick patching. The same Dell update fixes several other issues in the product.
Quick check
Why is the score only medium?
The record rates it 5.3. Dell fixes it alongside other, higher rated issues in the same update, so apply the whole update.
Sources
Last reviewed: 19 October 2026.
