PT-2026-89082 · Dell · Secure Connect Gateway 5.0 - Appliance+1

CVE-2026-79947

·

Publicado

2026-09-09

·

Atualizado

2026-09-09

CVSS v3.1

5.5

Média

VetorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to script injection.

Correção

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2026-79947

Produtos afetados

Secure Connect Gateway 5.0 - Appliance
Secure Connect Gateway 5.0 - Application