CVE-2026-79943: Medium severity Dell SCG 5.0 Appliance vulnerability

Published Sep 7, 2026
·
Updated

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to protection mechanism bypass.

Affected Software

2 affected components
Dell SCG 5.0 Appliance<5.36.00.16
Dell SCG 5.0 Application<5.36.00.00

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Upgrade

    Upgrade Dell SCG 5.0 Appliance to a version that resolves this vulnerability.

    Fixed in 5.36.00.16
  2. Upgrade

    Upgrade Dell SCG 5.0 Application to a version that resolves this vulnerability.

    Fixed in 5.36.00.00

Event History

Sep 7, 2026
CVE Published
via MITRE·03:50 PM
Data Sourced
via MITRE·03:50 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·04:17 PM
DescriptionSeverityWeakness

Frequently Asked Questions

1

Which deployments need to be updated?

Dell SCG 5.0 Appliance deployments before version 5.36.00.16 and Dell SCG 5.0 Application deployments before version 5.36.00.00 are affected.

2

Does exploitation require an account or user interaction?

No. The vulnerability can potentially be exploited by an unauthenticated attacker with remote access, and no user interaction is required.

3

What access would an attacker need?

The attacker needs remote network access to the affected Dell SCG deployment. The attack complexity is rated high.

4

What is the potential impact?

Successful exploitation could bypass a protection mechanism and may result in limited confidentiality and integrity impact. No availability impact is indicated.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203