Findings

CVE-2026-78026

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.

Published Oct 9, 2026 · updated Oct 14, 2026 · dell policy manager for secure connect gateway

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

  1. Oct 9, 2026 · NIST NVD

    Detected

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

  2. Oct 14, 2026 · NIST NVD

    Updated

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

Affected

  • cpe dell/policy manager for secure connect gatewayversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-78026

    Official CVE identifier

    cve.org
  • FIRST EPSSExploitation probabilityCVE-2026-78026

    30-day exploitation probability 0.2%

    first.org
  • NIST NVDVulnerability recordCVE-2026-78026

    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privilege

    nvd.nist.gov

References

CVE-2026-78026 · ZeroDay Findings