Zero Day MonitorZDM
DashboardVulnerabilitiesTrendingZero-DaysNews
Login
ImpressumPrivacy Policy
Zero Day Monitor © 2026
2963 articles · 106573 vulns · 38/41 feeds (7d)
← Back to list
4.7
CVE-2026-27101EXPLOITEDPATCHED

CVE-2026-27101: Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Impro

Description

Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker within the management network could potentially exploit this vulnerability, leading to remote execution.

Also Affects

Downstream vendors/products affected by this vulnerability

VendorProductSourceConfidence
dellsecure connectcert_advisory90%

References

  • https://www.dell.com/support/kbdoc/en-us/000438589/dsa-2026-020-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities(vendor-advisory)

Related News (2 articles)

Tier B
BSI Advisories4h ago
[UPDATE] [mittel] Dell Secure Connect Gateway: Schwachstelle ermöglicht Codeausführung
→ No new info (linked only)
Tier C
VulDB7h ago
CVE-2026-27101 | Dell Secure Connect Gateway up to 5.0/5.28.00.xx/5.32.00.xx path traversal (dsa-2026-020)
→ No new info (linked only)
CVSS 3.14.7 MEDIUM
VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CISA KEV❌ No
Actively exploited✅ Yes
Patch available
5.34.00.00 or later
CWECWE-22
PublishedApr 1, 2026
Last enriched4h agov3
Trending Score53
Source articles2
Independent2
Info Completeness10/14
Missing: epss, kev, iocs, mitre_attack

Community Vote

0
Login to vote
0 upvotes0 downvotes
No votes yet

Pin to Dashboard

Verification

State: unverified
Confidence: 0%

Vulnerability Timeline

CVE Published
Apr 1, 2026
Discovered by ZDM
Apr 1, 2026
Updated: severity, activelyExploited
Apr 1, 2026
Updated: description, exploitAvailable
Apr 1, 2026
Actively Exploited
Apr 1, 2026
Exploit Available
Apr 1, 2026
Patch Available
Apr 1, 2026

Version History

v3
Last enriched 4h ago
v3Tier B4h ago

Updated description with new technical details and marked exploit as available.

descriptionexploitAvailable
via BSI Advisories
v2Tier C6h ago

Updated severity to CRITICAL and marked the vulnerability as actively exploited.

severityactivelyExploited
via VulDB
v17h ago

Initial creation