Server-Side Request Forgery in Dell Secure Connect Gateway Policy Manager
CVE-2026-78027

5.8MEDIUM

Key Information:

Vendor

Dell
Status
Secure Connect Gateway (scg) Policy Manager
Vendor
CVE Published:
9 October 2026

What is CVE-2026-78027?

The Dell Secure Connect Gateway Policy Manager is susceptible to a Server-Side Request Forgery (SSRF) vulnerability, which allows an attacker with high privileges and remote access to exploit the system. If successfully exploited, this vulnerability could result in unauthorized information disclosure, affecting the confidentiality and integrity of sensitive data within the environment. It is crucial for users to update to version 5.34.00.16 or later to mitigate this risk effectively.

Affected Version(s)

Secure Connect Gateway (SCG) Policy Manager 0 < 5.36.00.16 or later

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-20...
vendor-advisory

CVSS V3.1

Score:
5.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.