Secure Connect Gateway CVE-2026-79694

Exploitation requires physical or authenticated remote local access to the SCG host system with at minimum a low-privileged (non-anonymous) account, as confirmed by the CVSS vector AV:L/PR:L. Both the Appliance and Application deployment variants of SCG 5.0 up to the patched versions are affected. No special feature toggle, non-default configuration, or network-facing service exposure is required beyond possessing a valid local login credential. The primary limiting factor is the mandatory local presence: remote unauthenticated exploitation is not possible, anonymous host access is insufficient, and an attacker must already control a valid local account on the SCG system.

The CVSS 5.5 Medium rating is well-calibrated here: the local attack vector (AV:L) and low-privilege requirement (PR:L) substantially constrain the exploitable population - even a mid-sized municipal IT team in ustka managing a Dell SCG deployment would face meaningful exposure only from insiders or attackers who have already achieved a foothold on the appliance via a separate vulnerability. The high confidentiality impact (C:H) reflects that SCG, as a remote support gateway, may hold sensitive credentials or telemetry data within its debug artifacts, making that exposure consequential if reached. No EPSS score was provided in the input, and the absence of a KEV listing combined with the local-only vector indicates this is not currently a target of opportunistic remote exploitation. Real-world risk is therefore bounded to insider threat scenarios, post-compromise privilege escalation chains, or environments where local access to SCG hosts is insufficiently controlled.

An attacker with a valid low-privileged local account on the SCG host - obtained through credential theft, lateral movement from another compromised system, or insider access - reads debug log files or diagnostic output paths containing sensitive data such as internal credentials or configuration secrets. No public exploit code has been identified, making this scenario most relevant to insider threats or post-compromise enumeration during a broader intrusion.