Dell SCG 5.0 CVE-2026-79693

Exploitation requires local system access and a high-privilege account (PR:H per CVSS). The attacker must already be authenticated to the SCG host with administrative or equivalent credentials - unauthenticated remote exploitation is not possible. No special non-default configuration is required beyond having a high-privilege local session. The impact is bounded to low integrity and low availability effects with no confidentiality breach, limiting the incentive for targeted exploitation. Exploitation is constrained to the local system scope (S:U); lateral movement or scope escalation is not directly implied.

Real-world risk is low. The CVSS base score of 3.4 accurately reflects the severely constrained prerequisites: the attacker must already have high-privileged local access to the SCG host. The impact is limited to low integrity and low availability degradation with no confidentiality loss (C:N), meaning sensitive data exposure is not a direct outcome. There is no KEV listing, no EPSS data provided, and no public proof-of-concept identified, so exploitation appears theoretical and opportunistic at most. In practice, an attacker who already holds high-privilege local access to an SCG node likely has more impactful attack paths available. The primary concern is privilege boundary enforcement for defense-in-depth - a high-privilege user should not be able to affect system components outside their designated scope. This is a low-urgency, patch-during-normal-cycle issue for most organizations, though environments with strict separation of duties or multi-tenant SCG deployments should prioritize patching.

A local administrator or high-privileged service account user on a Dell SCG 5.0 host interacts with an over-privileged internal component, invoking operations or modifying system state that their role should not permit - for example, altering configuration or disrupting availability of a subsystem outside their authorized scope. No public proof-of-concept exists, and exploitation requires physical or remote console access with pre-existing high privilege.