CVE-2026-61409: Dell Secure Connect Gateway

High severity, CVSS 7.3. EPSS: 1.5% chance of exploitation in the next 30 days.

Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.

Affected products

• Dell Secure Connect Gateway: before 5.36.00.00 (fixed in 5.36.00.00)

Published 2026-09-07. Last modified 2026-09-16.