Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

18 records

Release: Dell Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later Clear all filters
TI-2026-69911 CVE-2026-78340 · GHSA-8j8c-g759-2j2g

Path traversal in Dell Secure Connect Gateway Policy Manager

Priority LOW 30

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00117 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-22
TI-2026-69910 CVE-2026-78339 · GHSA-4pvw-c4q7-9cf5

Incorrect permissions in Dell Secure Connect Gateway Policy Manager

Priority LOW 32

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.00087 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-732
TI-2026-69909 CVE-2026-78027 · GHSA-hmv8-7c2j-c3hg

Server-side request forgery in Dell SCG Policy Manager

Priority LOW 29

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1MEDIUM 6.8 Network High privileges No interaction EPSS 0.00193 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-918
TI-2026-69908 CVE-2026-78026 · GHSA-7fh8-5hpp-3hhj

Authorization bypass in Dell Secure Connect Gateway Policy Manager

Priority LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.0019 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-639
TI-2026-69907 CVE-2026-78025 · GHSA-mwx9-pj39-v89h

Missing authentication in Dell Secure Connect Gateway Policy Manager

Priority LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00299 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-306
TI-2026-69906 CVE-2026-78024 · GHSA-mrv9-v83f-53hc

Server-side request forgery in Dell SCG Policy Manager

Priority LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability.

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.00195 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-918
TI-2026-69905 CVE-2026-78023 · GHSA-fc4g-crw4-hc7m

Authorization bypass in Dell Secure Connect Gateway Policy Manager

Priority LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00186 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-639
TI-2026-69900 CVE-2026-78022 · GHSA-55r5-qmgg-gm62

Fail-open flaw in Dell Secure Connect Gateway Policy Manager

Priority LOW 37

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00198 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-636
TI-2026-69898 CVE-2026-78020 · GHSA-4wmw-p7m3-h442

Improper certificate validation in Dell SCG Policy Manager

Priority LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.0018 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-295
TI-2026-69897 CVE-2026-78019 · GHSA-phc8-5h83-mfgj

Untrusted functionality in Dell Secure Connect Gateway Policy Manager

Priority MEDIUM 40

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00347 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-829
TI-2026-69896 CVE-2026-78018 · GHSA-rpvq-xmg6-x8xc

Insecure default initialization in Dell SCG Policy Manager

Priority LOW 32

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.

CVSS 3.1HIGH 7.1 Local Low privileges No interaction EPSS 0.0009 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-1188
TI-2026-69895 CVE-2026-78017 · GHSA-wxr4-mm3r-687w

Improper check in Dell Secure Connect Gateway Policy Manager

Priority LOW 17

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability.

CVSS 3.1LOW 3.8 Network High privileges No interaction EPSS 0.00203 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-754
TI-2026-69894 CVE-2026-78016 · GHSA-4wq5-53x9-qmrm

Improper input validation in Dell SCG Policy Manager

Priority LOW 19

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00159 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-1287
TI-2026-69893 CVE-2026-78015 · GHSA-jcc7-vfx6-hw43

Untrusted source use in Dell Secure Connect Gateway Policy Manager

Priority LOW 23

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.001 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-348
TI-2026-69892 CVE-2026-78013 · GHSA-vw5f-qccv-f63v

Insecure default initialization in Dell SCG Policy Manager

Priority LOW 27

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability.

CVSS 3.1MEDIUM 6.3 Local High privileges No interaction EPSS 0.00105 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-1188
TI-2026-69891 CVE-2026-76779 · GHSA-2fw7-4gg3-crqx

Dell Secure Connect Gateway Policy Manager lacks login attempt limits

Priority MEDIUM 42

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00269 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-307
TI-2026-69890 CVE-2026-76769 · GHSA-pg8v-vmm2-97mx

Missing authorization in Dell SCG Policy Manager allows escalation

Priority LOW 39

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00189 Published 2026-10-09 Fixed in 5.36.00.16 or later CWE-862