Secure Connect Gateway CVE-2026-78480

No authentication is required and attack complexity is low - any attacker with network-layer access to the Dell SCG 5.0 management interface can exploit this vulnerability. The limiting factor is network reachability: if the SCG management plane is restricted to an internal network or VPN segment, exploitation requires the attacker to first gain presence on that segment. No specific configuration option, feature flag, or non-default setting is described as a prerequisite - the vulnerability appears to exist in the default deployment of both the Appliance and Application variants in all versions prior to the patched releases. No user interaction is required. The impact is constrained to availability (A:H); confidentiality and integrity are not confirmed as impacted per the Dell-supplied CVSS vector.

The CVSS 3.1 score of 7.5 reflects a high-severity, fully unauthenticated, low-complexity network attack with availability-only impact - a realistic and actionable risk profile. The attack vector is network (AV:N), complexity is low (AC:L), and no credentials or user interaction are required, meaning exploitation is straightforward for any attacker with TCP access to the SCG management interface. However, the impact is scoped to availability (A:H, C:N, I:N), which partially mitigates the urgency compared to a full RCE or data-disclosure scenario. The description uses the phrase 'unauthorized access,' which is broader than the CVSS vector implies - this inconsistency suggests the description may overstate the impact or that the confidentiality/integrity dimensions were deliberately rated N by Dell after internal assessment; security teams should verify with the vendor whether any secondary access pathway exists. No public exploit code is identified and the vulnerability is not listed in the CISA KEV catalog at time of analysis, keeping the EPSS-equivalent practical risk moderate. Even a mid-sized municipal IT team in radom managing a Dell SCG deployment should treat this as a priority patch, particularly if the management interface is reachable from untrusted network segments. The fully unauthenticated nature (PR:N) and no required interaction make this automatable - bulk scanning and triggering is plausible.

An unauthenticated attacker with network access to a Dell SCG 5.0 management interface sends a crafted HTTP or API request directly to a critical function endpoint that lacks any authentication enforcement. The attacker triggers a disruptive action - such as a service restart, system reset, or configuration flush - causing the SCG to become unavailable and disrupting remote support monitoring for the environment it serves. No public proof-of-concept is confirmed, but the low complexity and lack of any authentication requirement make this a low-skill attack.