Findings

CVE-2026-78023

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.

Published Oct 9, 2026 · updated Oct 14, 2026 · dell policy manager for secure connect gateway

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 9, 2026 · NIST NVD

    Detected

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected

  • cpe dell/policy manager for secure connect gatewayversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-78023

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-78023

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2026-78023

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privilege

    nvd.nist.gov

References