CVE-2026-79645 in Secure Connect Gateway
Summary
by MITRE • 09/07/2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 09/07/2026
The identified security flaw resides within Dell SCG 5.0 Appliance versions prior to build 5.36.00.16 and the corresponding Application versions prior to 5.36.00.00. This vulnerability is classified as a Missing Authentication for Critical Function, which represents a significant deviation from fundamental security principles regarding access control. In this context, critical functions within the storage container gateway interface are exposed without requiring valid authentication credentials or session validation before execution. This architectural oversight allows any entity with network connectivity to interact directly with sensitive administrative endpoints that should be strictly gated behind an authenticated user session.
From a technical perspective, the vulnerability stems from improper implementation of access control mechanisms on specific API endpoints or management interfaces within the SCG software stack. When an unauthenticated actor sends requests to these targeted functions, the system fails to verify the identity or privileges of the requester before processing the command. This lack of verification bypasses the intended security boundary, effectively rendering authentication controls inert for these particular operations. The flaw is particularly dangerous because it does not require complex exploitation techniques such as buffer overflows or logic errors; rather, it relies on the simple absence of a required credential check during request handling.
The operational impact of this vulnerability is severe due to its potential for remote exploitation by unauthenticated attackers who have network access to the affected system. An attacker could leverage this flaw to gain unauthorized access to critical management functions, potentially leading to full compromise of the storage infrastructure. This could result in data exfiltration, modification or deletion of stored data, disruption of service availability through denial-of-service actions, and further lateral movement within the enterprise network by using the compromised SCG as a pivot point. The ability to execute administrative commands without authentication undermines the integrity and confidentiality guarantees provided by the storage solution.
This vulnerability aligns with CWE-306, which describes Missing Authentication for Critical Function, indicating that the software does not perform adequate checks before executing security-critical operations. In terms of offensive security frameworks, this flaw facilitates actions consistent with MITRE ATT&CK technique T1078, Valid Accounts, although in this case, it allows access without any account at all, effectively bypassing authentication entirely to achieve initial foothold or privilege escalation within the application layer. It also relates to CWE-287, Improper Authentication, as the system fails to correctly verify the identity of a user prior to granting access to protected resources.
To mitigate this risk, organizations running affected versions must immediately apply the vendor-recommended patches that update the Dell SCG Appliance to version 5.36.00.16 or later and the Application component to version 5.36.00.00 or later. These updates contain the necessary code changes to enforce strict authentication checks on all critical functions, thereby closing the access control gap. Until patches are applied, administrators should ensure that the SCG management interfaces are not exposed directly to untrusted networks and restrict network-level access using firewalls or ACLs to only trusted administrative subnets as a compensating control. Regular vulnerability scanning and adherence to patch management policies are essential to prevent exploitation of such known defects in production environments.