Dell SCG CVE-2026-80169

Exploitation requires a valid local account on the Dell SCG 5.0 Appliance or Application host with at least low operating-system privileges (PR:L) - no administrative rights are needed. The attacker must have local filesystem access (AV:L), meaning remote network exploitation is not possible. The vulnerability is present in any default deployment of the affected versions; no special non-default configuration is required to trigger it. Exploitation is limited by: (1) the requirement for local system access - remote or unauthenticated attackers cannot exploit this directly; (2) the scope of exposed data is bounded to what SCG logs (partial confidentiality loss, C:L); (3) integrity and availability are unaffected (I:N, A:N).

Real-world risk is low, consistent with the CVSS score of 3.3. All key CVSS dimensions constrain the attack surface: AV:L (must have local system access), PR:L (must hold a valid local account), and C:L (only partial confidentiality loss - log content is bounded). No KEV listing and no POC availability further reduce urgency. EPSS data was not provided, but given the local-only vector and low severity, exploitation probability is expected to be minimal. The primary risk scenario involves an insider threat or a post-compromise lateral movement where an attacker with local access harvests credentials or session tokens from logs to escalate or pivot. This is a meaningful internal hygiene issue but does not represent an external attack surface. No CVSS conflicts or missing signals are detected; the provided vector is consistent with the description.

A local user with a standard (non-root, non-admin) account on the SCG appliance browses to the application log directory, reads log files containing plaintext credentials or session tokens written by the SCG application, and uses those credentials to authenticate to other systems or escalate privileges within the support environment. No exploit code is required; simple file-read access is sufficient.