exploitDog

CVE-2026-79641

Опубликовано: 09 сент. 2026

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

Ссылки

https://www.dell.com/support/kbdoc/en-in/000503426/dsa-2026-382-security-update-for-dell-secure-connect-gateway-virtual-edition-multiple-vulnerabilities
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*

Версия до 5.36.00.00 (исключая)

cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*

Версия до 5.36.00.16 (исключая)

EPSS

Процентиль: 50%

0.00666

Низкий

7.5 High

CVSS3

Дефекты

CWE-78

Связанные уязвимости

GHSA-xxcf-rj2c-3wrj

CVSS3: 7.5

github

9 дней назад

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges.

EPSS

Процентиль: 50%

0.00666

Низкий

7.5 High

CVSS3

Дефекты

CWE-78