Secure Connect Gateway (Appliance < 5.36.00.16) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/secure-connect-gateway-appliance--5.36.00.16/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 09 Sep 2026 21:02:07 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgCommand Injection Vulnerability in Dell Secure Connect Gatewayhttps://feed.craftedsignal.io/briefs/2026-09-dell-scg-command-injection/Wed, 09 Sep 2026 21:02:07 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-09-dell-scg-command-injection/Dell Secure Connect Gateway (SCG) contains a critical command injection vulnerability allowing unauthenticated remote attackers to perform script injection and potential unauthorized command execution.Dell Secure Connect Gateway (SCG) versions 5.0 are affected by a critical command injection vulnerability identified as CVE-2026-79941. The flaw stems from improper neutralization of special elements used in system commands, enabling an unauthenticated remote attacker to inject malicious scripts. This vulnerability impacts both the SCG Appliance (fixed in version 5.36.00.16) and the SCG Application (fixed in version 5.36.00.00). Successful exploitation could allow an attacker to execute arbitrary commands within the context of the appliance or application, leading to a full compromise of the affected gateway. Given the administrative nature of SCG, which typically manages connectivity for hardware infrastructure, this represents a significant risk to the integrity of the network management environment.

Impact

Successful exploitation of this vulnerability grants an unauthenticated attacker remote command execution capabilities on the affected Dell SCG appliance or application. This can lead to unauthorized access to management functions, potential exfiltration of sensitive configuration data, or lateral movement within the network from the compromised appliance. The vulnerability carries a CVSS v3.1 base score of 9.8, reflecting its high impact and ease of exploitability via remote, unauthenticated channels.

Recommendation

  • Upgrade all Dell Secure Connect Gateway (SCG) Appliance instances to version 5.36.00.16 or later.
  • Upgrade all Dell Secure Connect Gateway (SCG) Application instances to version 5.36.00.00 or later.
  • Restrict network access to the SCG web management interface to trusted administrative subnets only.
  • Audit network logs for anomalous HTTP requests targeting the SCG management interface that utilize shell metacharacters or encoded payloads.
]]>criticaladvisory