Secure Connect Gateway EUVD-2026-95585

Requires the attacker to already have an authenticated, low-privileged local account on the system hosting Dell Secure Connect Gateway (SCG) Policy Manager (CVSS PR:L, AV:L). Exploitation abuses an incorrect permission assignment on a critical resource (CWE-732) - i.e., files or objects granted broader read/write access than intended - so the realistic prerequisite is local shell or service-account access to the SCG host. No user interaction is needed (UI:N) and attack complexity is low (AC:L), but the flaw cannot be triggered remotely or by an unauthenticated actor; these are the primary limiting factors that constrain real-world exploitability to insiders or attackers who have already gained a foothold.

Signals here are consistent and point to a moderate, non-urgent priority. The CVSS 3.1 vector (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N, 7.1 HIGH) requires local access and existing low-level privileges, which substantially limits the attacker population compared to a network-facing flaw. EPSS is very low (0.09%, 0th percentile) and the vulnerability is NOT in CISA KEV; SSVC corroborates this with Exploitation: none and Automatable: no, meaning no evidence of active or automatable exploitation. The one elevating signal is SSVC Technical Impact: total, which aligns with the CVSS C:H/I:H (full confidentiality and integrity loss once the permission misassignment is abused). There is no conflict between the CVSS local vector and the description, which also explicitly states 'local access' and 'low privileged attacker' - these agree. No POC is referenced. Net: this is a legitimate privilege/permission flaw worth patching on normal maintenance cadence, but it is not a drop-everything issue - the local + authenticated prerequisite and absence of any exploitation evidence keep real-world risk modest. One data caveat: the affected-version ceiling differs between sources (see confidence notes), which affects remediation targeting more than risk scoring.

A user who already holds a low-privileged local account on the host running Dell SCG Policy Manager leverages insecure file or resource permissions (CWE-732) to read or modify critical resources they should not be able to touch. By doing so they disclose sensitive configuration or credential data and bypass protection mechanisms to gain unauthorized access beyond their intended role. No public exploit identified at time of analysis, and exploitation requires pre-existing local access, which raises the practical bar.