Dell Secure Connect Gateway EUVD-2026-75026

Exploitation requires the attacker to achieve a man-in-the-middle (MITM) position on the network path between the Dell Secure Connect Gateway instance and its remote communication endpoints, confirmed by the AC:H metric in the CVSS vector. No authentication is required (PR:N) and no user interaction is needed (UI:N). The key limiting factor is network-level MITM capability, which is not achievable by purely remote opportunistic attackers against properly segmented enterprise networks but is realistic for insiders, attackers with lateral movement access, or those controlling network infrastructure between the appliance and Dell's support backend. Impact is bounded to low confidentiality loss (C:L); integrity and availability are unaffected. Both the Appliance and Application 5.0 deployment modes are vulnerable.

The CVSS 3.7 score (AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N) accurately reflects a limited but real threat: the AC:H metric confirms that successful exploitation requires the attacker to first achieve a man-in-the-middle position on the network path between the SCG instance and Dell's support endpoints, a non-trivial prerequisite that substantially reduces opportunistic risk. Impact is constrained to low confidentiality loss - diagnostic or management metadata - with no integrity or availability impact. No KEV listing exists, no EPSS data was provided, and no public proof-of-concept has been identified, all consistent with a low-urgency vulnerability for most environments. That said, the nature of SCG as a remote support gateway means intercepted communications could expose topology details, credentials, or support session data; even a mid-sized municipal IT team in gdynia would be wise to apply the available patch promptly rather than deprioritize it solely on the basis of the low CVSS score, since MITM capability is achievable by sophisticated insiders or lateral-movement actors. The 'Authentication Bypass' tag in the input metadata is a loose label - CWE-295 describes certificate validation failure, which can facilitate identity spoofing but is more precisely a cryptographic control weakness than a traditional authentication bypass.

An attacker with the ability to intercept traffic on the network path between a Dell SCG 5.0 instance and its Dell support backend - for example, via ARP spoofing on a local segment or a compromised network device - presents a forged TLS certificate that the SCG accepts without proper validation. The attacker then decrypts and reads diagnostic or management data transiting the support channel. No public proof-of-concept has been identified.