What is the CVSS score of CVE-2026-27101?

CVE-2026-27101 has a CVSS 3.1 base score of 4.7 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L. EPSS exploitation probability: 0.2%.

Is there a patch available for CVE-2026-27101?

Yes, a patch is available for CVE-2026-27101. Update the affected software to the latest version immediately.

Dell CVE-2026-27101

EUVD-2026-17822 MEDIUM

Path Traversal (CWE-22)

2026-04-01 dell

Dell Path Traversal

4.7

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.7 MEDIUM

AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

Lifecycle Timeline

Patch available

Apr 16, 2026 - 05:29 EUVD

5.34.00.00

EUVD ID Assigned

Apr 01, 2026 - 08:00 euvd

EUVD-2026-17822

Analysis Generated

Apr 01, 2026 - 08:00 vuln.today

CVE Published

Apr 01, 2026 - 07:27 nvd

MEDIUM 4.7

DescriptionCVE.org

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.

AnalysisAI

Path traversal vulnerability in Dell Secure Connect Gateway (SCG) versions 5.28.00.xx through 5.32.00.xx allows high-privileged attackers on the management network to bypass directory restrictions and achieve remote code execution. With a CVSS score of 4.7 and requiring high privilege level access, this vulnerability poses moderate risk to organizations running vulnerable SCG versions but is limited by the need for administrative-level attacker access within the management network. No public exploit code or active exploitation has been confirmed at time of analysis.

Technical ContextAI

The vulnerability stems from improper input validation in path handling mechanisms within Dell SCG, specifically a path traversal flaw (CWE-22) that fails to properly restrict file access to intended directories. Dell SCG is an enterprise secure gateway appliance and application that manages remote secure connectivity; the affected versions run between 5.28.00.xx and 5.32.00.xx across both the appliance and application deployment models. By crafting malicious path inputs with directory traversal sequences (such as '../' notation), a high-privileged attacker positioned within the management network can escape sandbox restrictions, access sensitive files outside the intended directory structure, and potentially escalate to remote code execution by writing to executable paths or configuration files.

RemediationAI

Organizations should upgrade Dell SCG to version 5.33.00.xx or later, which contains the security fix for this path traversal vulnerability. Interim mitigations pending patching include restricting network access to the SCG management interface to only trusted administrator IP ranges and implementing strict role-based access control to limit which users can access administrative functions. Detailed guidance and the security update are available in Dell's security advisory DSA-2026-020 at https://www.dell.com/support/kbdoc/en-us/000438589/dsa-2026-020-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities.