CVE-2026-79728 Dell CVE debrief

Who should care

Defenders responsible for Dell SCG appliances and applications should assess exposure and apply vendor remediation if necessary. This includes IT administrators, security teams, and vulnerability management teams. These teams should review the affected versions, verify exposure, and apply vendor remediation to prevent potential security incidents. Additionally, defenders should monitor for potential exploitation attempts and review compensating controls to

Why it matters

CVE-2026-79728 is a Relative Path Traversal vulnerability in Dell Secure Connect Gateway, allowing unauthenticated attackers to gain filesystem access. Defenders should prioritize verifying exposure and applying vendor remediation for affected versions.

• Potential filesystem access for attackers
• Need to verify exposure and apply vendor remediation
• Possible impact on system security and data integrity

Technical summary

The vulnerability exists in Dell Secure Connect Gateway (SCG) versions prior to 5.36.00.16 for appliances and 5.36.00.00 for applications. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to filesystem access. The vulnerability is caused by improper validation of user input, allowing attackers to traverse the file system. This could lead to unauthorized access to sensitive files and data, potentially resulting in data breaches or other security incidents. Defenders should prioritize verifying exposure and applying vendor remediation for Dell SCG versions prior to 5.36.00.16 for appliances and 5.36.00.00 for applications.

Defensive priority

Defenders should prioritize verifying exposure and applying vendor remediation for Dell SCG versions prior to 5.36.00.16 for appliances and 5.36.00.00 for applications.

Recommended defensive actions

• Verify Dell SCG versions and apply vendor remediation if necessary
• Review and update inventory of Dell SCG appliances and applications
• Monitor for potential exploitation attempts
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its description, CVSS score, and affected versions. The vulnerability is a Relative Path Traversal issue in Dell Secure Connect Gateway (SCG). The CVE record was published on 2026-09-09T13:20:38.290Z and has not been modified since then. There are no known exploits or reports of this vulnerability being used in attacks.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.