{"id":"CVE-2026-78025","published":"2026-10-09T10:16:38.707","lastModified":"2026-10-13T17:17:46.347","description":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.","cvssScore":7.5,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","cwes":["CWE-306"],"vendors":["dell"],"products":["policy manager for secure connect gateway"],"references":[{"url":"https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","tags":["Vendor Advisory"]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"Dell Secure Connect Gateway Policy Manager has a critical authentication flaw that allows unauthenticated attackers to access sensitive functions and potentially disclose confidential information. This vulnerability exists in versions prior to 5.34.00.16.","exploitability":"Exploitation is straightforward for remote attackers with no prerequisites, as the vulnerability allows direct access to critical functions without authentication requirements.","blast_radius":"If exploited, this vulnerability could allow attackers to bypass protection mechanisms and gain unauthorized access to sensitive configuration data and policy settings across Dell Secure Connect Gateway deployments.","remediation":"Upgrade to 5.34.00.16 or later","detection":"No reliable host or network indicator is derivable from the published description.","tags":["auth-bypass","policy-manager","remote-access","configuration"],"model":"garnet-coder","analyzedAt":"2026-10-17T09:03:23.309Z"}}