Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-79636

Quick assessment

Affected
Dell Secure Connect Gateway 5.0 - Application
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Dell SCG 5.0 设备（Appliance）5.36.00.16 之前的版本以及 Dell SCG 5.0 应用程序（Application）5.36.00.00 之前的版本，存在“证书主机不匹配时未正确验证”的漏洞。拥有远程访问权限的未认证攻击者可能利用此漏洞，从而导致未授权访问。

CVSS 7.0 · High

Possible ATT&CK Techniques 1 AI

T1200 · Hardware Additions
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-79636

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Validation of Certificate with Host Mismatch vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
对宿主不匹配的证书验证不恰当
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Dell Secure Connect Gateway 5.0 - Application 0 ~ 5.36.00.00 or later -
Dell Secure Connect Gateway 5.0 - Appliance 0 ~ 5.36.00.16 or later -

II. Public POCs for CVE-2026-79636

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-79636

请登录查看更多情报信息。

Same Patch Batch · Dell · 2026-09-09 · 13 CVEs total

CVE-2026-78491 8.2 HIGH Dell SCG 5.0 证书验证不当致未授权访问
CVE-2026-78494 7.4 HIGH Dell SCG 5.0 5.36之前版本证书验证不当
CVE-2026-80122 7.3 HIGH Dell SCG 5.0 证书验证缺陷致未授权访问
CVE-2026-80123 7.3 HIGH Dell SCG 5.0 SSRF致DoS漏洞
CVE-2026-80177 6.5 MEDIUM Dell SCG SQL注入漏洞
CVE-2026-79974 6.4 MEDIUM Dell SCG 5.0 特定版本身份认证不当漏洞
CVE-2026-79973 6.3 MEDIUM Dell SCG 5.0 多线程竞争导致拒绝服务
CVE-2026-79967 5.6 MEDIUM Dell SCG 5.0 证书验证不当致防护机制绕过
CVE-2026-80124 5.5 MEDIUM Dell SCG 5.0 日志敏感信息泄露
CVE-2026-79640 5.4 MEDIUM Dell SCG 5.0 SQL注入漏洞
CVE-2026-80055 4.4 MEDIUM Dell SCG 5.0 旧版存在LDAP注入漏洞
CVE-2026-80175 3.3 LOW Dell SCG 5.0敏感信息暴露至外部可访问目录

IV. Related Vulnerabilities

Same product: Secure Connect Gateway 5.0 - Application
Same vendor: Dell
Same weakness: CWE-297

V. Comments for CVE-2026-79636

No comments yet

Leave a comment