Critical severity9.4NVD Advisory· Published Sep 7, 2026· Updated Sep 11, 2026
CVE-2026-61410
CVE-2026-61410
Description
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Missing Authorization vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution. This vulnerability is considered critical because it allows an attacker to execute commands remotely on a target system by sending a specially crafted request to the application, bypassing intended restrictions on code execution.Dell recommends customers to upgrade at the earliest opportunity.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*+ 2 more
- cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:application:*:*:*range: <5.36.00.00
- cpe:2.3:a:dell:secure_connect_gateway:*:*:*:*:virtual:*:*:*range: <5.36.00.16
- (no CPE)range: <5.36.00.16 (Appliance), <5.36.00.00 (Application)
Patches
Vulnerability mechanics
References
1News mentions
2- ⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser HijacksThe Hacker News · Sep 21, 2026
- Dell Secure Connect Gateway Vulnerabilities Allow Hackers to Gain Unauthorized AccessCyber Security News · Sep 8, 2026