Secure Connect Gateway (SCG) Policy Manager vulnerabilities

27 known vulnerabilities in Secure Connect Gateway (SCG) Policy Manager from Dell. 27 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  Secure Connect Gateway (SCG) Policy Manager: Incorrect Authorization

  CVE-2026-78341Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges an

• 7.1 High severity

  Secure Connect Gateway (SCG) Policy Manager: Incorrect Permission Assignment for Critical Resource

  CVE-2026-78339Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t

• 8.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Authorization Bypass Through User-Controlled Key

  CVE-2026-78026Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to El

• 7.5 High severity

  Secure Connect Gateway (SCG) Policy Manager: Missing Authentication for Critical Functionality

  CVE-2026-78025Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Infor

• 8.7 High severity

  Secure Connect Gateway (SCG) Policy Manager: Server-Side Request Forgery

  CVE-2026-78024Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disc

• 8.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Authorization Bypass Through User-Controlled Key

  CVE-2026-78023Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to El

• 8.1 High severity

  Secure Connect Gateway (SCG) Policy Manager: Not Failing Securely

  CVE-2026-78022Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mec

• 8.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Certificate Validation

  CVE-2026-78020Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service

• 8.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Inclusion of Functionality from Untrusted Control Sphere

  CVE-2026-78019Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leadi

• 7.1 High severity

  Secure Connect Gateway (SCG) Policy Manager: Initialization of a Resource with an Insecure Default

  CVE-2026-78018Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t

• 9.8 Critical severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Restriction of Excessive Authentication Attempts

  CVE-2026-76779Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, le

• 8.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Missing Authorization

  CVE-2026-76769Oct 9, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.

• 7.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Incorrect Permission Assignment for Critical Resource

  CVE-2026-73598Sep 29, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading t

• 8.1 High severity

  Secure Connect Gateway (SCG) Policy Manager: Cross-Site Request Forgery

  CVE-2026-73597Sep 29, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disc

• 9.8 Critical severity

  Secure Connect Gateway (SCG) Policy Manager: Download of Code Without Integrity Check

  CVE-2026-73595Sep 29, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerabili

• 8.8 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Certificate Validation

  CVE-2026-73594Sep 29, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerabi

• 7.5 High severity

  Secure Connect Gateway (SCG) Policy Manager: Inclusion of Sensitive Information in Source Code

  CVE-2026-73591Sep 23, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to

• 7.4 High severity

  Secure Connect Gateway (SCG) Policy Manager: Missing Authentication for Critical Functionality

  CVE-2026-73588Sep 23, 2026Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unaut

• 9.8 Critical severity

  Secure Connect Gateway (SCG) Policy Manager: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2024-37131Jun 13, 2024Dell

  SCG Policy Manager, all versions, contains an overly permissive Cross-Origin Resource Policy (CORP) vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the execution of malicious actions on the application

• 7.6 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2024-24907Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in the Filters page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of mal

• 7.6 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2024-24905Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS

• 7.6 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2024-24904Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of malicious HTML or JavaS

• 8.0 High severity

  Secure Connect Gateway (SCG) Policy Manager: Weak Password Recovery Mechanism for Forgotten Password

  CVE-2024-24903Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, version 5.10+, contain a weak password recovery mechanism for forgotten passwords. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized access to the

• 7.6 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Neutralization of Input During Web Page Generation

  CVE-2024-24906Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain(s) a Stored Cross-Site Scripting Vulnerability in Policy page. An adjacent network high privileged attacker could potentially exploit this vulnerability, leading to the storage of maliciou

• 7.3 High severity

  Secure Connect Gateway (SCG) Policy Manager: Improper Authorization

  CVE-2024-24900Mar 1, 2024Dell

  Dell Secure Connect Gateway (SCG) Policy Manager, all versions, contain an improper authorization vulnerability. An adjacent network low privileged attacker could potentially exploit this vulnerability, leading to unauthorized devices added to policies. Exploi

• 9.8 Critical severity

  Secure Connect Gateway (SCG) Policy Manager: Use of Hard-coded Credentials

  CVE-2022-34441Jan 11, 2023Dell

  Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the sys

• 9.8 Critical severity

  Secure Connect Gateway (SCG) Policy Manager: Use of Hard-coded Credentials

  CVE-2022-34440Jan 11, 2023Dell

  Dell EMC SCG Policy Manager, versions from 5.10 to 5.12, contain(s) a contain a Hard-coded Cryptographic Key vulnerability. An attacker with the knowledge of the hard-coded sensitive information, could potentially exploit this vulnerability to login to the sys