Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.
Published: 2026-10-09
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Elevation of Privileges
Action: Patch Now
AI Analysis

Impact

The vulnerability is an Incorrect Authorization flaw (CWE-863) in Dell Secure Connect Gateway Policy Manager. It permits an attacker who has gained remote high‑privileged access to elevate privileges and obtain unauthorized control over the gateway, potentially compromising confidentiality, integrity, or availability of network services managed by the gateway.

Affected Systems

Dell Secure Connect Gateway Policy Manager versions earlier than 5.34.00.16, including all releases that precede that build from the Dell product line.

Risk and Exploitability

The CVSS score of 6.5 indicates moderate severity, and the EPSS score is not available. The vulnerability is not listed in CISA KEV, but the need for remote access means that a network‑exposed gateway could be a realistic target. An attacker with sufficient remote privileges could traverse the policy manager interface to perform privileged actions.

Generated by OpenCVE AI on October 9, 2026 at 10:35 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later.
  • Limit remote access to the Policy Manager to trusted hosts and enforce network segmentation.
  • Revoke unnecessary high‑privilege accounts and apply the principle of least privilege to service accounts.

Generated by OpenCVE AI on October 9, 2026 at 10:35 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 14 Oct 2026 14:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell policy Manager For Secure Connect Gateway
CPEs cpe:2.3:a:dell:policy_manager_for_secure_connect_gateway:*:*:*:*:*:*:*:*
Vendors & Products Dell policy Manager For Secure Connect Gateway

Sun, 11 Oct 2026 12:30:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell secure Connect Gateway Policy Manager
Vendors & Products Dell
Dell secure Connect Gateway Policy Manager

Sat, 10 Oct 2026 13:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Fri, 09 Oct 2026 11:00:00 +0000

Type Values Removed Values Added
Title Incorrect Authorization Allows Privilege Escalation in Dell Secure Connect Gateway Policy Manager

Fri, 09 Oct 2026 09:45:00 +0000

Type Values Removed Values Added
Description Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.
Weaknesses CWE-863
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N'}

Subscriptions

Dell Policy Manager For Secure Connect Gateway Secure Connect Gateway Policy Manager
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-10T12:16:43.734Z

Reserved: 2026-08-24T11:06:27.230Z

Link: CVE-2026-78341

cve-icon Vulnrichment

Updated: 2026-10-10T12:08:35.271Z

cve-icon NVD

Status : Analyzed

Published: 2026-10-09T10:16:39.387

Modified: 2026-10-14T14:12:26.127

Link: CVE-2026-78341

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-11T12:15:18Z

Weaknesses