Dell SCG 5.0 EUVD-2026-74767

Exploitation requires an attacker to have a local, low-privilege account on the host running Dell SCG 5.0 Appliance (prior to 5.36.00.16) or SCG 5.0 Application (prior to 5.36.00.00). The attacker must be able to read files or directories on the local filesystem that the SCG service writes sensitive information to. Remote unauthenticated exploitation is not possible given AV:L. Exploitation is limited to: (1) local access to the SCG host, (2) low-privilege OS account, and (3) the specific file/directory being readable by that account - typical hardened deployments restricting shell access to SCG appliances significantly reduce real-world risk.

The CVSS 3.1 vector CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N accurately reflects the constrained threat model: exploitation requires local, authenticated, low-privilege access to the host running SCG, yields only limited confidentiality impact, and has no integrity or availability dimension. EPSS data is not provided; given the local-only vector and low CVSS, opportunistic internet-based exploitation is not plausible. There is no KEV listing and no public POC. For environments where SCG appliances or application instances are accessed by multiple, potentially untrusted local users (e.g., shared administrative jump hosts), the risk is marginally elevated. For typical SCG deployments with restricted local access, real-world exploitability is low. The primary concern is privilege escalation via exposed credentials or tokens if the sensitive data in the accessible file could be reused for higher-privilege operations.

A low-privilege local user on a shared SCG appliance or application host navigates to or reads an externally-accessible log, configuration, or temporary file written by the SCG service. If that file contains credentials, API tokens, or other sensitive material, the attacker extracts them and potentially uses them to authenticate to Dell support back-end services or other internal systems. No public exploit code exists for this scenario.