CVE-2026-27101
MediumCVSS 4.7Exploitation Probability (EPSS)
Low risk32th percentile - higher than 32% of all known CVEs
Summary
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application versions 5.28.00.xx to 5.32.00.xx contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
Risk Assessment
A high-privileged attacker within the management network could exploit path traversal to achieve remote code execution, potentially leading to full system compromise.
Recommendation
Update Dell Secure Connect Gateway to a version containing the fix. Restrict access to the management network and apply the principle of least privilege.
Other vulnerabilities in Dell Secure Connect Gateway
See all- CVE-2026-78021Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to information disclosure and exposure.
- CVE-2026-78017Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to information tampering and protection mechanism bypass.
- CVE-2026-78016Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this vulnerability, leading to information exposure and information tampering.
- CVE-2026-78015Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to information tampering.
- CVE-2026-79732Low
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.xx contain an improper certificate validation vulnerability. An unauthenticated attacker with remote access could exploit it, leading to protection mechanism bypass.
- CVE-2025-46363Medium
Dell Secure Connect Gateway (SCG) 5.0 (versions 5.26.00.00 - 5.30.00.00) contains a relative path traversal vulnerability in the internal collection download REST API, if enabled by an admin. A low privileged attacker with remote access can exploit this to access restricted resources.
Original NVD description (English source)
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS