← Back to search

CVE-2026-78024

7.7 HIGH

Published 2026-10-09 · Updated 2026-10-13

AI risk analysis

Summary
A Server-Side Request Forgery (SSRF) vulnerability in Dell Secure Connect Gateway Policy Manager allows high-privileged attackers to perform unauthorized server-side requests, potentially leading to information disclosure and system compromise. This affects versions prior to 5.34.00.16.
Exploitability
Exploitation requires a high-privileged attacker with remote access and is moderately difficult due to the need for specific request manipulation, but the vulnerability is remotely exploitable.
Blast radius
If exploited, this vulnerability could allow attackers to access internal network resources, bypass protection mechanisms, and disclose sensitive information from the affected system.
Detection
No reliable host or network indicator is derivable from the published description.
Prioritized remediation
Upgrade to 5.34.00.16 or later
ssrfremotegateway

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.

NVD description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:N

Weaknesses

CWE-918

Vendors

dell

Products

policy manager for secure connect gateway

All references

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

Related by shared AI tags and CWE weakness class. Browse the full archive.