Dell Secure Connect Gateway CVE-2026-79741

No authentication is required (PR:N per CVSS vector). The attacker needs network-level access to the Dell SCG management interface - exploitation is limited to hosts that can reach that interface, which in standard enterprise deployments means the management VLAN or a host with a routed path to the appliance. No user interaction is required. The specific vulnerable parameter or endpoint is not disclosed in the advisory. Exploitation is bounded by the constrained impact: the vendor's CVSS rates I:N, meaning the script injection does not appear to enable arbitrary write or command execution, only limited information disclosure (C:L). Organizations that have already restricted management interface access to dedicated management networks substantially reduce their exposure even before patching.

The vendor-provided CVSS 3.1 score of 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N presents an apparent tension: a CWE-77 command injection finding with zero integrity impact is atypical, as injecting into a command context almost always implies some ability to alter system state. The scoring suggests Dell has determined the injection is constrained - likely limited to a scripting or templating context where the attacker can elicit information disclosure (C:L) but cannot materially modify data or system state. No EPSS data is included, no KEV listing exists, and no POC is known, all of which reduce operational urgency. The attack complexity is low and no authentication is required, meaning exploitation is technically straightforward if the attack surface is network-reachable; however, SCG appliances are typically deployed in managed enterprise networks rather than exposed to the open internet. Real-world risk is moderate: the confidentiality-only impact limits the blast radius, but unauthenticated network exploitability against a support gateway that handles sensitive diagnostic data warrants timely patching.

An external attacker who can reach the SCG appliance's network-exposed interface (no authentication required) sends a crafted HTTP request containing shell metacharacters or script directives in a vulnerable parameter. The injected content is processed by an unprotected scripting or command context within SCG, causing the application to disclose configuration data or internal state. No POC is publicly known, but the low attack complexity (AC:L, PR:N) means a proof-of-concept could be developed from the description alone.