{"id":"CVE-2026-78020","published":"2026-10-09T09:17:09.300","lastModified":"2026-10-14T14:11:57.813","description":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","cwes":["CWE-295"],"vendors":["dell"],"products":["policy manager for secure connect gateway"],"references":[{"url":"https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Dell Secure Connect Gateway Policy Manager fails to properly validate SSL/TLS certificates, allowing attackers to perform man-in-the-middle attacks that can lead to complete system compromise through denial of service, information disclosure, and remote code execution.","exploitability":"Exploitation requires an unauthenticated attacker with remote network access who can intercept or manipulate TLS connections, making it moderately difficult but not highly complex to achieve.","blast_radius":"If exploited, this vulnerability could affect all systems using Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16, potentially compromising entire network infrastructure and sensitive data communications.","remediation":"Upgrade to version 5.34.00.16 or later immediately","detection":"No reliable host or network indicator is derivable from the published description.","tags":["ssl","mitm","rce"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:03:30.469Z"}}