CVE-2026-78490: High severity Dell SCG 5.0 Appliance vulnerability
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to client-side request forgery.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell SCG 5.0 Applianceto a version that resolves this vulnerability.Fixed in 5.36.00.16 - Upgrade
Upgrade
Dell SCG 5.0 Applicationto a version that resolves this vulnerability.Fixed in 5.36.00.00
Event History
Frequently Asked Questions
Which deployments are affected?
Dell SCG 5.0 Appliance versions earlier than 5.36.00.16 and Dell SCG 5.0 Application versions earlier than 5.36.00.00 are affected.
Does exploitation require credentials or user interaction?
No. The vulnerability is described as exploitable by an unauthenticated attacker with remote access, with no user interaction required.
What access would an attacker need?
The attacker needs remote network access to the affected Dell SCG deployment. The provided information does not indicate that local access or prior authentication is required.