CVE-2026-61410

This is a flaw in software used to connect Dell equipment and support services. It is like leaving a building's control room unlocked: someone who can reach it could issue commands as though they were an authorized administrator.

This matters to you if you run Dell Secure Connect Gateway 5.0, whether as an Appliance or Application installation. It requires no attacker login or staff action, and is a risk when the system is reachable over the network.

An attacker who can reach the vulnerable system can take control of it remotely without credentials, which makes this a red-priority issue. There is no confirmed public exploitation or public exploit code at this time, but the default network reachability and takeover capability make prompt remediation necessary.

Confirm the installed Secure Connect Gateway 5.0 edition and release from its administration interface or deployment records, then identify every instance reachable from other networks. Upgrade Appliance deployments to 5.36.00.16 or later and Application deployments to 5.36.00.00 or later, following Dell's release-specific upgrade guidance and validating the service after the upgrade. If patching must wait, limit inbound network access to only necessary administrator and Dell support paths; do not leave the management service broadly reachable. CISA KEV does not list this CVE, so there is no CISA remediation due date. Review gateway and system logs for unexpected requests, new processes, configuration changes, or administrator activity around the upgrade window.

CVE-2026-61410 is rated CVSS 9.4 Critical (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L). It is CWE-862, Missing Authorization: a remote unauthenticated attacker can send a specially crafted request and execute arbitrary commands. No CISA KEV listing, confirmed exploitation report, or public exploit code is recorded. EPSS estimates a 1.2% likelihood and is flat (68th percentile); this is predictive rather than evidence of exploitation.