Patch Forecast
Yellow warning
Plan into this sprint.

CVE-2026-78022

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not…

Risk score
50/100
CVSS
8.1 v3.1
Exploit chance (30 days)
0.2%
Published
9 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Affected
Dell Policy Manager For Secure Connect Gateway before 5.34.00.16
Fix
Upgrade Dell Policy Manager For Secure Connect Gateway to 5.34.00.16 or later.
Exploitation
No known exploitation

Story map

Story map: Dell Policy Manager For Secure Connect GatewayTHE FLAWSTHE FIXCVE-2026-78022Dell Secure Connect Gateway(SCG) Policy Manager, versionsprior to 5.34.00.16, contains a…CVSS 8.1 · EPSS 0%CVE-2026-76779Privilege escalationCVSS 9.8 · EPSS 0%CVE-2026-73595Remote code executionCVSS 9.8 · EPSS 0%CVE-2026-78020Denial of serviceCVSS 8.8 · EPSS 0%Upgrade Dell Policy Manager…5.34.00.16 · 5.36or later on your release lineWho is exposedDell Policy Manager For SecureConnect Gateway before5.34.00.16AMBER · PATCH THIS WEEKDell PolicyManager For…Dell Secure Connect Gateway(SCG) Policy Manager, versionsprior to 5.34.00.16, contains anImproper Restriction ofExcessive AuthenticationAttempts vulnerability. Anunauthenticated attacker with…Where it standsNo known exploitationCONNECTS TOSame weaknessCWE-636 (CWE-636)6 other warnings in 30 days →Same productEarlier Dell Policy Manager For Secure ConnectGateway warnings23 in the last 90 days →
Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Dell Policy Manager For Secure Connect Gateway: Amber, patch this week. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypa…

The flaws

  • CVE-2026-78022: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not… (CVSS 8.1 · EPSS 0%)
  • CVE-2026-76779: Privilege escalation (CVSS 9.8 · EPSS 0%)
  • CVE-2026-73595: Remote code execution (CVSS 9.8 · EPSS 0%)
  • CVE-2026-78020: Denial of service (CVSS 8.8 · EPSS 0%)

The fix

Upgrade Dell Policy Manager For Secure Connect Gateway: 5.34.00.16 · 5.36 or later on your release line

Who is exposed: Dell Policy Manager For Secure Connect Gateway before 5.34.00.16

Where it stands

  • No known exploitation

Connects to

Why it is Yellow

  • CVSS 8.1 high

References

Original description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Last activity 9 Oct 2026. Patch Forecast updates every hour.