CVE-2026-78020

Summary

Dell Secure Connect Gateway Policy Manager fails to properly validate SSL/TLS certificates, allowing attackers to perform man-in-the-middle attacks that can lead to complete system compromise through denial of service, information disclosure, and remote code execution.

Exploitability

Exploitation requires an unauthenticated attacker with remote network access who can intercept or manipulate TLS connections, making it moderately difficult but not highly complex to achieve.

Blast radius

If exploited, this vulnerability could affect all systems using Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16, potentially compromising entire network infrastructure and sensitive data communications.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 5.34.00.16 or later immediately

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.