Dell Secure Connect Gateway Flaws Enable Code Execution
Multiple vulnerabilities in Dell Secure Connect Gateway could let attackers execute arbitrary code with the logged-on user's privileges.
Sourcecisecurity.org — open the original
What to check
- Applies to
- Whether this concerns you is not assessed; the names the report mentions are listed below.
MS-ISAC issued an advisory detailing multiple vulnerabilities in Dell Secure Connect Gateway, an enterprise monitoring and connection tool for Dell infrastructure. The most severe of these flaws could allow arbitrary code execution in the context of the logged-on user, potentially enabling an attacker to install programs, manipulate or delete data, or create new accounts with full user rights. The impact scales with the privileges of the compromised account, meaning systems where users operate with administrative rights face greater risk.
No evidence of in-the-wild exploitation has been reported at this time. Affected versions include Dell Secure Connect Gateway 5.0 Application prior to 5.36.00.00 and the Appliance variant prior to 5.36.00.16. Dell has released updates addressing these issues, and MS-ISAC recommends prompt patching following standard testing procedures, alongside standard defense-in-depth measures such as least-privilege enforcement, application allowlisting, host-based intrusion detection/prevention, and routine vulnerability scanning.
This advisory is largely informational and preventive in nature, targeting organizations running Dell infrastructure management software. Given the absence of active exploitation and the requirement for a logged-on user context, the risk is best characterized as moderate, warranting timely patch management rather than emergency response.
Source reporting: https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-dellsecure-connect-gateway-could-allow-for-arbitrary-code-execution_2026-089
Free public brief. Slack alerts on the vendors you run come with the paid plans, and a new account gets three days of them, no card.
What this brief leaves out
This page is the free tier: the write-up, the severity, the names. The paid plans add the security research and news reporting the free tier leaves out.
It sits in a corpus of 16,433 reports from 149 sources, 661 of them written in the last seven days, and it grows through the day.
A new account starts with three days of all of it, no card, then keeps the government and CERT reporting free. Slack alerts are a paid-plan feature: name the vendors you run and Slack hears about the reports that touch them, not the rest of the week's. Nothing is charged unless you subscribe.
Create a free account What it costs