← Back to search

CVE-2026-78019

7.5 HIGH

Published 2026-10-09 · Updated 2026-10-13

AI risk analysis

Summary
The vulnerability allows low-privileged attackers with remote access to potentially escalate privileges and gain filesystem access, leading to remote code execution through untrusted functionality inclusion in Dell's Secure Connect Gateway Policy Manager.
Exploitability
Exploitation requires a low-privileged user with remote access and is moderately difficult due to the need for specific control flow manipulation within the policy manager's untrusted control sphere.
Blast radius
If exploited, this vulnerability could allow attackers to execute arbitrary code on the gateway system, potentially compromising the entire network infrastructure managed by the Secure Connect Gateway.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to Dell Secure Connect Gateway Policy Manager version 5.34.00.16 or later to remediate this vulnerability.
priv-escrcepolicy-manager

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesystem access for attacker, and Remote execution.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-829

Vendors

dell

Products

policy manager for secure connect gateway

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.