CVE-2026-71177

5.4 MEDIUM

Published 2026-09-23 · Updated 2026-09-25

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session theft.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weaknesses

CWE-1021

Vendors

dell

Products

policy manager for secure connect gateway

All references

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-70486PoC
CRITICALCVE-2026-84388

Related by shared AI tags and CWE weakness class. Browse the full archive.