CVE-2026-79941 is a medium severity (CVSS 5.3) command injection in Dell Secure Connect Gateway 5.0. Appliance versions before 5.36.00.16 and Application versions before 5.36.00.00 are affected. Dell lists script injection as the outcome. Update to those builds or later, per Dell advisory DSA-2026-382.
What's affected
- Product: Dell Secure Connect Gateway (SCG) 5.0.
- Affected: Dell SCG 5.0 Appliance versions prior to 5.36.00.16, and Dell SCG 5.0 Application versions prior to 5.36.00.00.
- Fixed: Appliance 5.36.00.16 and Application 5.36.00.00, or later. Dell's page would not load for me, so confirm the details in DSA-2026-382.
- Weakness: CWE-77, improper neutralization of special elements used in a command.
- CVSS 5.3 (medium), vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N. Dell lists the outcome as script injection. Not listed in CISA KEV.
How to check if you're exposed
Find your Secure Connect Gateway deployments and read the version in the admin interface. Appliance builds need 5.36.00.16 or later, and the Application build needs 5.36.00.00 or later.
Then check who can reach the service. The record says an unauthenticated attacker with remote access could use this flaw, so network reach is the main factor. Find firewall rules or proxies that expose it beyond the networks that need it.
What to do now
- Find every Dell SCG appliance and application install and its version.
- Update to Appliance 5.36.00.16 or Application 5.36.00.00, or later, per Dell advisory DSA-2026-382.
- Restrict network access to the gateway to the networks that need it.
- Read DSA-2026-382 for the other CVEs fixed in the same update, since one upgrade covers them.
Why it matters
This is the general command injection class, the parent of the OS command variant that Dell fixed in the same update under another CVE. Both let input influence a command, and Dell lists script injection as the result.
Because the record names no more detail, the sensible response is the update, plus tight network access to the gateway.
Quick check
How is this different from CVE-2026-79689?
That CVE is the OS command variant, CWE-78. This one is the broader command class, CWE-77. Both are fixed by the same update.
Sources
Last reviewed: 19 October 2026.
