PT-2026-1437 · Dell · Dell Secure Connect Gateway

Published 2026-01-06 · Updated 2026-02-03 · CVE-2025-46696

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway versions 5.26 through 5.30

Description Dell Secure Connect Gateway (SCG) 5.0 Appliance and Application contains an Execution with Unnecessary Privileges issue. A local attacker with high privileges could potentially exploit this, leading to Elevation of privileges.

Recommendations Update Dell Secure Connect Gateway to a version newer than 5.30.

Fix

LPE

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-46696

Affected Products

Dell Secure Connect Gateway

References · 5

• https://dell.com/support/kbdoc/en-us/000385230/dsa-2025-390-dell-secure-connect-gateway-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-46696 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46696 · Security Note
• https://t.me/cveNotify/150760 · Telegram Post
• https://twitter.com/CVEnew/status/2008565818154750120 · Twitter Post