CVE-2026-79952
Quick assessment
Affected
Dell Secure Connect Gateway 5.0 - Application
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dell SCG 5.0 Appliance 中早于 5.36.00.16 的版本，以及 Dell SCG 5.0 Application 中早于 5.36.00.00 的版本，存在“输出的不当编码或转义”（Improper Encoding or Escaping of Output）漏洞。拥有远程访问权限的未经身份验证的攻击者可能利用此漏洞，进而发起网络钓鱼（phishing）攻击。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-79952
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Encoding or Escaping of Output vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to launch of phishing attacks.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对输出编码和转义不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | Secure Connect Gateway 5.0 - Application | 0 ~ 5.36.00.00 or later | - |
|
| Dell | Secure Connect Gateway 5.0 - Appliance | 0 ~ 5.36.00.16 or later | - |
|
II. Public POCs for CVE-2026-79952
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-79952
请登录查看更多情报信息。
Same Patch Batch · Dell · 2026-09-09 · 51 CVEs total
| CVE-2026-80172 | 9.8 CRITICAL | Dell SCG 5.0 重放攻击漏洞，可获取管理员权限 |
| CVE-2026-78491 | 8.2 HIGH | Dell SCG 5.0 证书验证不当致未授权访问 |
| CVE-2026-79637 | 7.7 HIGH | Dell SCG 5.0 早期版本证书验证不当漏洞 |
| CVE-2026-79950 | 7.5 HIGH | Dell SCG 5.0 硬编码凭据漏洞 |
| CVE-2026-79740 | 7.5 HIGH | Dell SCG 5.0 硬编码凭据致信息泄露 |
| CVE-2026-79738 | 7.5 HIGH | Dell SCG 5.0 硬编码凭据致信息泄露 |
| CVE-2026-79641 | 7.5 HIGH | Dell SCG 5.0低于5.36.00.16/00.00存在OS命令注入致提权 |
| CVE-2026-78490 | 7.5 HIGH | Dell SCG 5.0旧版本认证限制不当漏洞 |
| CVE-2026-78492 | 7.4 HIGH | Dell SCG 5.0 证书验证不当漏洞 |
| CVE-2026-79963 | 7.4 HIGH | Dell SCG 5.0 代码下载完整性检查漏洞 |
| CVE-2026-78494 | 7.4 HIGH | Dell SCG 5.0 5.36之前版本证书验证不当 |
| CVE-2026-80122 | 7.3 HIGH | Dell SCG 5.0 证书验证缺陷致未授权访问 |
| CVE-2026-78485 | 7.3 HIGH | Dell SCG 5.0 路径遍历致未授权访问 |
| CVE-2026-79695 | 7.3 HIGH | Dell SCG 5.0 压缩数据放大导致远程拒绝服务 |
| CVE-2026-79635 | 7.3 HIGH | Dell SCG 5.0 多版本SSRF漏洞 |
| CVE-2026-79692 | 7.3 HIGH | Dell SCG 5.0早期版本文件路径控制漏洞 |
| CVE-2026-80123 | 7.3 HIGH | Dell SCG 5.0 SSRF致DoS漏洞 |
| CVE-2026-79972 | 7.2 HIGH | Dell SCG 5.0 低于5.36版本存在SQL注入漏洞 |
| CVE-2026-79636 | 7.0 HIGH | Dell SCG 5.0证书主机不匹配漏洞 |
| CVE-2026-80177 | 6.5 MEDIUM | Dell SCG SQL注入漏洞 |
Showing top 20 of 51 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same weakness: CWE-116
-
CVE-2026-79964
Dell SCG 5.0 特定版本转义序列处理不当致钓鱼攻击 -
CVE-2026-87550
Chrome 153.0.8010.36前CSS输出编码不当致跨域 -
CVE-2026-69821
Active Directory Certificate Services (AD CS) Elevation of P -
CVE-2026-82756
ash_authentication_oauth2_server interpolates a tenant-deriv -
CVE-2026-84292
fast-uri vulnerable to authority injection via an unvalidate
V. Comments for CVE-2026-79952
No comments yet