Dell Secure Connect Gateway CVE-2026-79730

The attacker requires only network access to the SCG service interface - no authentication or special account privileges are needed (CVSS PR:N). However, the race condition requires winning a precise timing window between the check and use operations, making reliable exploitation dependent on network latency conditions and repeated attempts (CVSS AC:H). There is no indication that a non-default configuration is required; the flaw appears to exist in the standard SCG service. Exploitation is limited by the inherent timing difficulty of TOCTOU attacks over network connections, and no public exploit code exists to automate this.

The CVSS 5.6 Medium score is supported by the AC:H modifier, which correctly captures the inherent difficulty of winning a race condition reliably over a network connection - timing jitter and network latency make deterministic exploitation challenging. EPSS data is not provided in the available intelligence, and the CVE does not appear in the CISA KEV catalog, indicating no confirmed active exploitation. The SSVC signals suggest a 'track' disposition: the vulnerability is network-reachable and unauthenticated, but the high attack complexity and primarily availability-focused impact lower prioritization for most organizations compared to AC:L critical flaws. Real-world impact is most meaningful for environments where SCG availability is operationally critical, as repeated race-condition attempts could sustain a DoS condition. No public exploit has been identified at time of analysis.

An unauthenticated remote attacker sends a sequence of carefully timed requests to a vulnerable SCG instance, racing between the application's validation checkpoint and its subsequent resource consumption step. By winning the TOCTOU window - substituting or manipulating the checked resource before it is consumed - the attacker triggers an unhandled state that causes the SCG service to crash or become unresponsive, denying support connectivity to downstream infrastructure.