Server-Side Request Forgery Vulnerability in Dell Secure Connect Gateway
CVE-2026-78024

7.7HIGH

Key Information:

Vendor

Dell
Status
Secure Connect Gateway (scg) Policy Manager
Vendor
CVE Published:
9 October 2026

What is CVE-2026-78024?

The Dell Secure Connect Gateway Policy Manager, in versions before 5.34.00.16, is susceptible to a Server-Side Request Forgery (SSRF) vulnerability. A remotely positioned, high-privileged attacker could exploit this weakness, resulting in unauthorized access, potential information disclosure, and the circumvention of security mechanisms. This vulnerability poses a significant risk to systems utilizing the affected versions of the product, making it crucial for users to update to the latest version to safeguard their environments.

Affected Version(s)

Secure Connect Gateway (SCG) Policy Manager 0 < 5.36.00.16 or later

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.