Executive brief
Dell Secure Connect Gateway (SCG) is a network security appliance and application that manages secure connections across corporate environments. A privilege violation in versions prior to 5.36.00.16 (appliance) and 5.36.00.00 (application) allows a high-privileged local attacker to gain unauthorized access to the system, potentially compromising network security and data confidentiality.
Technical details
This vulnerability is classified as a Least Privilege Violation (CWE-269), affecting Dell SCG 5.0 appliance versions before 5.36.00.16 and application versions before 5.36.00.00. The attack requires high privilege level and local access to the affected system. Exploitation leads to unauthorized access; however, specific technical details regarding the vulnerable component and root cause mechanism are not provided in the available advisory material. A patch is available in the specified remediated versions.
Affected products
- Dell Secure Connect Gateway Appliance prior to 5.36.00.16
- Dell Secure Connect Gateway Application prior to 5.36.00.00
Timeline
- 2026-09-09: disclosed
- 2026-09-09: patched: Security update available in versions 5.36.00.16 (appliance) and 5.36.00.00 (application)