Dell SCG 5.0 Appliance <5.36.00.16: Missing Auth Remote Exec
CVE-2026-61410 Published on September 7, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerability is considered critical because it allows an attacker to execute commands remotely on a target system by sending a specially crafted request to the application, bypassing intended restrictions on code execution.Dell recommends customers to upgrade at the earliest opportunity.
Vulnerability Analysis
CVE-2026-61410 is exploitable with network access, and does not require authorization privileges or user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and a small impact on availability.
Weakness Type
What is an AuthZ Vulnerability?
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVE-2026-61410 has been classified to as an AuthZ vulnerability or weakness.
Products Associated with CVE-2026-61410
Want to know whenever a new CVE is published for Dell Secure Connect Gateway? stack.watch will email you.
Affected Versions
Dell Secure Connect Gateway 5.0 - Application:- Before 5.36.00.00 or later is affected.
- Before 5.36.00.16 or later is affected.