Dell SCG 5.0 CVE-2026-80054

Exploitation requires an active local OS session on the Dell SCG 5.0 host with at minimum a low-privilege user account (PR:L). No network-based exploitation is possible (AV:L). No user interaction from a privileged user is needed once local access is established. Limiting factors include the requirement for prior local access - either a legitimate account or a separate initial-access vulnerability - and the read-only nature of the flaw (I:N/A:N), meaning the attacker can only exfiltrate data, not modify it. The vulnerability is not exploitable against default remote-access paths and affects only the local file system permission model of the SCG host.

The CVSS 5.5 Medium score with AV:L/PR:L accurately reflects the constrained attack surface - exploitation requires an existing local OS account with low privileges, limiting the threat to insider actors or post-compromise lateral movement. No EPSS data, KEV listing, or public exploit code is present in the available intelligence, suggesting this is not under active mass exploitation. However, the C:H rating is meaningful in context: SCG is a remote-support gateway that likely stores sensitive connection credentials or session keys locally, and even a mid-sized enterprise IT team in tczew using Dell SCG for vendor-managed hardware access should treat this as a meaningful insider-threat vector worth patching promptly. The absence of I and A impact (I:N/A:N) confirms this is a read-only information-disclosure path with no direct destructive capability, which moderates urgency somewhat compared to write-capable privilege escalations.

An attacker who has obtained a low-privilege shell on the SCG appliance - via a separate vulnerability, phishing a local admin, or using a compromised service account - navigates to an over-permissioned configuration or credential file and reads its contents. Because no public exploit code exists, exploitation currently requires manual enumeration of misconfigured paths rather than a one-click tool.