CVE catalog
CVE-2026-27101
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulner
- Severity
- Medium · CVSS 4.7
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L - Published
- Source
- [NVD] · [CVE record]
- EPSS
- 0.38% · Oct 25, 2026
Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Cpe | secure_connect_gateway | Not reported | 5.34.00.00 | fixed |
| Cpe | secure_connect_gateway | Not reported | 5.34.00.00 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Cpe | secure_connect_gateway | cpe | Not reported | 5.34.00.00 | Not reported | Not reported | Not reported |
| Cpe | secure_connect_gateway | cpe | Not reported | 5.34.00.00 | Not reported | NVD-CVE-2026-27101 | Not reported |
OpenFactory catalog packages
No matching packages in this catalog.
Observed:
References
- [https://nvd.nist.gov/vuln/detail/CVE-2026-27101]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-0735.json]
- [https://www.dell.com/support/kbdoc/en-us/000438589/dsa-2026-020-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities]
[CERT-Bund public advisories] · [FIRST EPSS] · [National Vulnerability Database (NVD)]