CVE-2026-79971
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Sanitization of Custom Special Characters vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Scoring
- Severity
- MEDIUM
- CVSS base score
- 5.3
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- CWE
- CWE-1236
- Published
- 2026-09-09
- Last modified
- 2026-09-09
Affected products
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
Weakness type
Related vulnerabilities
- CVE-2026-86745 — Snipe-IT before 8.7.0 CSV Formula Injection via Location-Scoping Export
- CVE-2026-86742 — Snipe-IT before 8.7.0 CSV Formula Injection via Asset Acceptance Report
- CVE-2026-86257 — wger before 2.6 CSV Formula Injection via member export
- CVE-2026-9852 — A CSV injection vulnerability exists in SYS600. Injected malicious formulas can add or modify data...
- CVE-2026-76797 — MongoSQL Transition Readiness Tool Improper Neutralization of Formula Elements in Generated Reports
- CVE-2026-56652 — Formula Injection in dool project
- CVE-2026-78209 — exceljs through 4.4.0 CSV Formula Injection via Unescaped Cell Values
- CVE-2026-64955 — Velociraptor CSV Formula Injection in Export Pipeline