CVE-2026-79640

MediumCVSS 5.4/10Last modified Sep 9, 2026

Description

Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
DellSecure Connect Gateway 5.0 - Application< 5.36.00.00 or later
DellSecure Connect Gateway 5.0 - Appliance< 5.36.00.16 or later

References

Timeline

Published
Sep 9, 2026
Last modified
Sep 9, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-796417.5Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper NeutraliCVE-2026-796425.6Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper CertificCVE-2026-796437.3Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Incorrect CVE-2026-796447.4Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper CertificCVE-2026-796458.2Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing AuthenticaCVE-2026-79653.1Insufficient validation of untrusted input in DevTools in Google Chrome prior to 148.0.7778.96 allowed a remote attacker who had compromisedCVE-2026-796506.1Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful authentication. The issue occuCVE-2026-796517.5A flaw was found in the theme localization endpoints of the keycloak-services component, which is the core service responsible for authenticCVE-2026-796525.9A flaw was found in the JWT Bearer authorization grant implementation within the keycloak-services component of Red Hat Build of Keycloak. TCVE-2026-796536.0In Eclipse SW360 versions 19.0.0, 19.1.0, 19.2.0, 20.0.0, 20.1.0, if the system is configured to use file system storage with config key enaCVE-2026-796544.3A flaw was found in Katello where the Content View History API does not properly enforce authorization when accessing a Content View specifiCVE-2026-796557.8A flaw was found in sos clean, a utility within the sos package. This vulnerability allows a local attacker to perform arbitrary file creati
CVE-2026-79640: Medium severity, CVSS 5.4 | Vulnix