CVE-2026-78025CWE-306

CVE-2026-78025

High · published October 9, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
33.5
In the wild
Unconfirmed
What it is

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00404 · 33.5th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2026-10-09T14:16Z
Affected products (1)
ProductVersionsFixed in
dell/policy_manager_for_secure_connect_gateway< 5.36.00.165.36.00.16
References (1)
https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9 · [email protected]
EPSS history
Timeline
  • 11 OCT 03:32Z
    EPSS moved — → 0%
    epss
  • 09 OCT 09:15Z
    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability
    cvelistv5
  • 09 OCT 09:15Z
    Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability
    cvelistv5