Dell Secure Connect Gateway EUVD-2026-72487

Requires high-privilege (admin-level) authentication to the Dell SCG management interface, confirmed by the CVSS PR:H metric. The interface must be reachable over the network (AV:N), meaning management ports exposed to untrusted networks or broad internal segments significantly increase risk. No user interaction is required (UI:N) once admin access is established. Limiting factors: attacker must first obtain valid admin credentials through a separate vector (phishing, credential theft, reuse); organizations with MFA enforced on SCG admin accounts, or with management interfaces firewalled to dedicated admin subnets, substantially reduce exploitability. The specific vulnerable endpoint or parameter is not disclosed in available data.

The CVSS 7.2 High score is consistent with the vector AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - exploitation is straightforward once admin credentials are obtained, but the PR:H prerequisite materially limits the attack surface. Real-world risk depends on how exposed SCG management interfaces are and how well admin credentials are protected; organizations that expose SCG management over wide networks or use weak/shared admin credentials face elevated risk. The 'elevation of privileges' outcome is notable: even a compromised application-level admin account can be leveraged to gain OS-root or equivalent access, making this a meaningful lateral-movement step in a multi-stage breach. No EPSS score was supplied, no POC is known, and the vulnerability is not listed in CISA KEV, collectively suggesting this is not under active mass exploitation. Priority should be highest for organizations with SCG management interfaces exposed to untrusted networks or broad internal segments. The AC:L rating confirms no special race conditions or complex pre-configuration is required beyond obtaining credentials.

An attacker who has obtained high-privilege (admin) credentials to the Dell SCG management interface - via phishing, credential reuse, or prior compromise of an admin workstation - sends a crafted HTTP request to a vulnerable management API endpoint containing OS command metacharacters (e.g., semicolons, backticks, or pipe characters) embedded in a parameter. The SCG application passes this input unsanitized to an underlying shell call, causing the injected commands to execute as the SCG service OS user (likely a privileged system account), granting the attacker OS-level control beyond the application boundary. No public exploit code is known at time of analysis.