Dell Secure Connect Gateway CVE-2026-80126

Exploitation requires a valid low-privilege user account on the targeted Dell Secure Connect Gateway instance (confirmed by CVSS PR:L). The vulnerability is reachable over the network without additional user interaction or elevated privileges (AV:N, UI:N). No special non-default configuration is described as a prerequisite; however, the race condition nature of CWE-667 implies the attacker must successfully win a timing window, which introduces practical complexity absent from the vendor's AC:L assignment. Exploitation is limited to SCG 5.0 Appliance versions below 5.36.00.16 and SCG 5.0 Application versions below 5.36.00.00; patched versions are not vulnerable.

The vendor CVSS 3.1 score of 6.5 (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) positions this as a medium-severity authenticated availability impact, but the description's reference to 'filesystem access for attacker' introduces ambiguity - confidentiality or integrity consequences may be understated in the official score. Race conditions (CWE-667) in practice often require precise timing, suggesting AC:H may be more accurate than the vendor-assigned AC:L. With PR:L required, exploitation is limited to authenticated low-privilege users, and since no public exploit or KEV listing exists, even a mid-sized municipal IT team in swidnica should treat this as a scheduled patch rather than an emergency remediation. EPSS data is not present in the source intelligence, and the absence of exploit code further supports a measured rather than urgent response posture.

An attacker with a low-privilege account on the Dell SCG environment sends carefully timed concurrent requests to a filesystem-touching endpoint, exploiting the improper locking flaw to win the race window and read or otherwise interact with filesystem paths outside their authorized scope. No public proof-of-concept code has been identified, and successful exploitation likely requires timing precision given the race condition nature of CWE-667. The attack is fully remote but requires valid credentials.