CVE-2026-27101EXPLOITEDPATCHED

dell · secure connect gateway

CVE-2026-27101: Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application version(s) 5.28.00.xx to 5.32.00.xx, contain(s) an Impro

Description

A remote, authenticated attacker can exploit a vulnerability in Dell Secure Connect Gateway to execute arbitrary code.

Affected Products

Vendor	Product	Versions
dell	secure connect gateway	0

Also Affects

Downstream vendors/products affected by this vulnerability

Vendor	Product	Source	Confidence
dell	secure connect	cert_advisory	90%

References

https://www.dell.com/support/kbdoc/en-us/000438589/dsa-2026-020-security-update-for-dell-secure-connect-gateway-application-and-appliance-vulnerabilities(vendor-advisory)

Related News (2 articles)

Tier B

BSI Advisories2h ago

[UPDATE] [mittel] Dell Secure Connect Gateway: Schwachstelle ermöglicht Codeausführung

→ No new info (linked only)

Tier C

VulDB5h ago

CVE-2026-27101 | Dell Secure Connect Gateway up to 5.0/5.28.00.xx/5.32.00.xx path traversal (dsa-2026-020)

→ No new info (linked only)

CVSS 3.14.7 CRITICAL

VectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA KEV❌ No

Actively exploited✅ Yes

Patch available

5.34.00.00 or later

CWECWE-22

PublishedApr 1, 2026

Last enriched2h agov3

Trending Score61

Source articles2

Independent2

Info Completeness10/14

Missing: epss, kev, iocs, mitre_attack

Community Vote

0 upvotes0 downvotes

No votes yet

Related CVEs (5)

HIGHCVE-2026-22768

CVE-2026-22768: Dell AppSync, version(s) 4.6.0, contain(s) an Incorrect Permission Assignment for Critical Resource vulnerability. A low

Trending: 32

HIGHCVE-2026-22767

CVE-2026-22767: Dell AppSync, version(s) 4.6.0, contain(s) an UNIX Symbolic Link (Symlink) Following vulnerability. A low privileged att

Trending: 27

MEDIUMCVE-2026-28265

CVE-2026-28265: PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access cou

Trending: 27

MEDIUMCVE-2026-22764

Dell OpenManage Network Integration, versions prior to 3.9, contains an Improper Authentication vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability

HIGHCVE-2025-36589

Dell Unisphere for PowerMax, version(s) 9.2.4.x, contain(s) an Improper Restriction of XML External Entity Reference vulnerability. A low privileged attacker with remote access could potentially explo

Pin to Dashboard

Verification

State: unverified

Confidence: 0%

Vulnerability Timeline

CVE Published

Apr 1, 2026

Actively Exploited

Apr 1, 2026

Exploit Available

Apr 1, 2026

Patch Available

Apr 1, 2026

Discovered by ZDM

Apr 1, 2026

Updated: severity, activelyExploited

Apr 1, 2026

Updated: description, exploitAvailable

Apr 1, 2026

Version History

Last enriched 2h ago

v3Tier B2h ago

Updated description with new technical details and marked exploit as available.

descriptionexploitAvailable

via BSI Advisories

v2Tier C4h ago

Updated severity to CRITICAL and marked the vulnerability as actively exploited.

severityactivelyExploited

via VulDB

v15h ago

Initial creation