CVE-2026-78025
7.5 HIGHPublished 2026-10-09 · Updated 2026-10-13
AI risk analysis
- Summary
- Dell Secure Connect Gateway Policy Manager has a critical authentication flaw that allows unauthenticated attackers to access sensitive functions and potentially disclose confidential information. This vulnerability exists in versions prior to 5.34.00.16.
- Exploitability
- Exploitation is straightforward for remote attackers with no prerequisites, as the vulnerability allows direct access to critical functions without authentication requirements.
- Blast radius
- If exploited, this vulnerability could allow attackers to bypass protection mechanisms and gain unauthorized access to sensitive configuration data and policy settings across Dell Secure Connect Gateway deployments.
- Detection
- No reliable host or network indicator is derivable from the published description.
- Prioritized remediation
- Upgrade to 5.34.00.16 or later
Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.
NVD description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-306
Vendors
dell
Products
policy manager for secure connect gateway
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- CRITICALCVE-2026-104076
- HIGHCVE-2026-80276
- HIGHCVE-2026-100262
- CRITICALCVE-2026-102764
- HIGHCVE-2026-12269
- HIGHCVE-2026-83621PoC
- CRITICALCVE-2026-86863PoC
- HIGHCVE-2026-92087PoC
Related by shared AI tags and CWE weakness class. Browse the full archive.