CVE-2026-78022

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.

Score

CVSS 3.1 8.1 High

Status

Analyzed - security_alert@emc.com

Published

2026-10-09

Last modified

2026-10-13

Weaknesses

CWE-636

Affected products

• Policy Manager For Secure Connect Gateway (Dell)
• Secure Connect Gateway Scg Policy Manager (Dell)

References

• https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-…