Dell SCG EUVD-2026-75011

No authentication is required per the PR:N CVSS metric. The attack is network-accessible (AV:N), meaning any attacker with IP connectivity to the SCG management interface can attempt exploitation. The primary limiting factor is AC:H - exploiting a TOCTOU race condition remotely requires precise concurrency timing and repeated attempts to reliably win the race window, which reduces likelihood of casual or automated exploitation. No specific non-default configuration is indicated as a prerequisite; any deployment of the affected SCG 5.0 Appliance (below 5.36.00.16) or Application (below 5.36.00.00) exposed on the network is potentially vulnerable. The SCG appliance is typically Internet-accessible or accessible from a DMZ to allow Dell's support infrastructure to connect, which extends the realistic attacker pool.

The overall risk profile is moderate. CVSS 5.6 with AC:H reflects the genuine difficulty of reliably winning a remote race condition, which reduces practical threat relative to simpler injection or authentication-bypass classes. No public exploit code exists, and CISA KEV does not list this CVE, indicating no confirmed active exploitation at time of analysis. EPSS data was not provided, but the combination of AC:H and absence of KEV/POC suggests real-world exploitation attempts are unlikely in the near term. A meaningful discrepancy exists between the description's stated DoS-only impact and the vendor's own CVSS vector, which sets C:L and I:L - meaning the vendor may be acknowledging limited information disclosure or integrity impact from partial state corruption even when the race doesn't fully complete; this ambiguity should prompt organizations to prioritize patching rather than relying on the description's conservative framing. No special conditions beyond network reachability are required, which does lower the bar somewhat for any attacker who can issue concurrent requests to the appliance.

An unauthenticated remote attacker sends a carefully timed sequence of concurrent requests to a vulnerable Dell SCG 5.0 endpoint, exploiting the window between a resource check and its use to corrupt shared state. Successful exploitation causes the targeted service to crash or become unresponsive, disrupting the remote support gateway and potentially interrupting Dell ProSupport connectivity for the affected organization. No public exploit code exists, and reliable exploitation requires precise timing, making opportunistic mass exploitation unlikely.