Dell Secure Connect Gateway CVE-2026-79641

Exploitation requires a valid low-privilege account on the Dell SCG 5.0 system (PR:L - unauthenticated exploitation is not supported by the CVSS vector). Remote network access to the SCG management interface is required (AV:N). High attack complexity (AC:H) indicates that a specific condition must be met - the exact nature is not disclosed in available documentation, but likely involves identifying the precise vulnerable API endpoint, input field, or workflow within SCG that processes input through an OS command call without sanitization. Limiting factors include: the low-privilege account prerequisite (narrows threat to insiders and credential-theft scenarios), the AC:H complexity gate (reduces automated/scripted exploitation viability), and network segmentation - SCG management interfaces are typically deployed on internal networks, constraining the attacker's network position. There is no evidence of a default-configuration exposure to unauthenticated external attackers.

CVSS 7.5 (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H) signals a high-severity but complexity-gated vulnerability: network-reachable and requiring only a low-privilege account, but with non-trivial exploitation conditions (AC:H) that reduce the threat of broad, automated exploitation. The full C:H/I:H/A:H trifecta indicates complete system compromise if successfully exploited, which is more severe than the description's 'elevation of privileges' framing implies - OS command injection at this level effectively constitutes remote code execution as a system or root-level user. No KEV listing, no POC, and no EPSS data were provided; in the absence of confirmed exploitation or public exploit code, this is an elevated-priority patching item for organizations running SCG 5.0, particularly internet-exposed management interfaces. The AC:H component moderates real-world automated risk, making this less immediately weaponizable than a similar AC:L flaw, but insider threats or targeted attackers with low-level credentials remain credible adversary profiles. The discrepancy between the description's 'elevation of privileges' and the CVSS full-impact scoring (C:H/I:H/A:H) should be noted - the description may undercharacterize the achieved access level.

An attacker with a low-privileged SCG user account - obtained via credential theft, weak password, or insider access - sends a crafted request to a vulnerable SCG management endpoint, embedding OS shell metacharacters or command separators in a field that is passed unsanitized to a system call. The injected command executes with elevated system privileges, granting the attacker root or SYSTEM-level control over the SCG appliance. AC:H implies the attacker must identify the specific injectable parameter or meet a non-obvious precondition, making this more likely a targeted attack than opportunistic mass scanning.