Improper UI Layer Restriction in Dell Secure Connect Gateway Policy Manager
CVE-2026-71177

5.4MEDIUM

Key Information:

Vendor

Dell
Status
Secure Connect Gateway (scg) Policy Manager
Vendor
CVE Published:
23 September 2026

What is CVE-2026-71177?

The Dell Secure Connect Gateway (SCG) Policy Manager, specifically versions prior to 5.34.00.16, is affected by a vulnerability that improperly restricts rendered UI layers or frames. This flaw allows low privileged attackers with remote access an opportunity to exploit the vulnerability, potentially resulting in elevation of privileges and session theft. It's essential for users to update to the latest version to mitigate this security risk. For further details and updates, refer to Dell's official advisory.

Affected Version(s)

Secure Connect Gateway (SCG) Policy Manager 0 < 5.36.00.16 or later

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.