Dell Secure Connect Gateway
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Dell Secure Connect Gateway.
By the Year
In 2026 there have been 141 vulnerabilities in Dell Secure Connect Gateway with an average score of 6.0 out of ten. Last year, in 2025 Secure Connect Gateway had 3 security vulnerabilities published. That is, 138 more vulnerabilities have already been reported in 2026 as compared to last year. However, the average CVE base score of the vulnerabilities in 2026 is greater by 0.33.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 141 | 5.98 |
| 2025 | 3 | 5.65 |
| 2024 | 20 | 6.94 |
| 2023 | 2 | 6.20 |
| 2022 | 0 | 0.00 |
| 2021 | 1 | 5.50 |
It may take a day or so for new Secure Connect Gateway vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Dell Secure Connect Gateway Security Vulnerabilities
Dell SCG Policy Manager <5.34.00.16 Incorrect Auth (EoP)
CVE-2026-78341
6.5 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Authorization vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Unauthorized access.
AuthZ
Dell SCG PM Path Trv before 5.34.00.16
CVE-2026-78340
6.3 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Filesystem access for attacker.
Directory traversal
DL Secure Connect Gateway DM 5.34.00.16: Incorrect Permission on Policy Manager
CVE-2026-78339
6.3 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.
Incorrect Permission Assignment for Critical Resource
Dell SCG Policy Manager SSRF before 5.34.00.16
CVE-2026-78027
5.8 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Server-side request forgery.
SSRF
Dell SCG Policy Manager <5.34.00.16 - Auth Bypass via User-Key
CVE-2026-78026
4.3 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Insecure Direct Object Reference / IDOR
Dell SCG Policy Manager <5.34.00.16: Missing Auth for Critical Function
CVE-2026-78025
7.5 - High
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.
Missing Authentication for Critical Function
Dell Secure Connect Gateway (SCG) Policy Manager SSRF <5.34.00.16
CVE-2026-78024
7.7 - High
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Server-Side Request Forgery (SSRF) vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, Server-side request forgery, and Unauthorized access.
SSRF
Dell SCG Policy Manager Auth ByPass via User Key <5.34.00.16
CVE-2026-78023
7.1 - High
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Authorization Bypass Through User-Controlled Key vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
Insecure Direct Object Reference / IDOR
Dell SCG Policy Manager <5.34.00.16 Failing Open Vulnerability
CVE-2026-78022
6.8 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Failing Open
Dell SCG PM CVE-2026-78021: Sensitive Error Info Exposure <=5.34.00.16
CVE-2026-78021
3.7 - Low
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.
Generation of Error Message Containing Sensitive Information
Dell SCG Policy Manager <5.34.00.16 Improper Cert Validation Remote Exploit
CVE-2026-78020
7.5 - High
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Remote execution.
Improper Certificate Validation
Dell SCG Policy Manager <5.34.00.16: Untrusted Control Sphere,Low-Priv Exploit
CVE-2026-78019
7.5 - High
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesystem access for attacker, and Remote execution.
Inclusion of Functionality from Untrusted Control Sphere
Dell SCG Policy Manager Init Secure Default before 5.34.00.16
CVE-2026-78018
6.3 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.
Insecure Default Initialization of Resource
Dell SCG Policy Manager prior 5.34.00.16 Improper Check Vulnerability
CVE-2026-78017
3.8 - Low
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information tampering and Protection mechanism bypass.
Improper Check for Unusual or Exceptional Conditions
Dell SCG Policy Manager Improper Input Validation before 5.34.00.16
CVE-2026-78016
3.1 - Low
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Information exposure and Information tampering.
Improper Validation of Specified Type of Input
Dell SCG Policy Manager <5.34.00.16: Less Trusted Source Vulnerability
CVE-2026-78015
3.7 - Low
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.
Use of Less Trusted Source
Dell SCG Policy Manager <5.34.00.16: Insecure Init Resource Vulnerability
CVE-2026-78013
5.2 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.
Insecure Default Initialization of Resource
Dell SCG Policy Manager <5.34.00.16: Auth Attempts Bypass (CVE-2026-76779)
CVE-2026-76779
7.4 - High
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.
Improper Restriction of Excessive Authentication Attempts
Dell SCG Policy Manager <5.34.00.16: Missing Auth Priv Esc
CVE-2026-76769
4.3 - Medium
- October 09, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authorization vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges.
AuthZ
Cleartext Transmission Vulnerability in Dell SCG Policy Manager v<5.34.00.16
CVE-2026-76114
5.9 - Medium
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.
Cleartext Transmission of Sensitive Information
Dell SCG <5.34.00.16 - Open Redirect (URL Red.) SSRF Vulnerability
CVE-2026-73599
5.4 - Medium
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.
Open Redirect
Dell SCG Policy Manager <=5.34.00.16 - Incorrect Permission Assignment EoP
CVE-2026-73598
7.8 - High
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.
Incorrect Permission Assignment for Critical Resource
Dell SCG Policy Manager <5.34.00.16 CSRF Vulnerability
CVE-2026-73597
6.5 - Medium
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cross-Site Request Forgery (CSRF) vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Launch of phishing attacks, and Protection mechanism bypass.
Session Riding
Dell SCG Policy Manager <5.34 Insecure Init Allows Elevation
CVE-2026-73596
3.8 - Low
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.
Insecure Default Initialization of Resource
Dell SCG Policy Manager <5.36: Code Exec via Download of Code W/O Integrity Check
CVE-2026-73595
4.7 - Medium
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.
Download of Code Without Integrity Check
Dell Secure Connect Gateway Policy Manager <5.34 Improper Certificate Validation
CVE-2026-73594
6.4 - Medium
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.
Improper Certificate Validation
Dell SCG Policy Manager (<5.34.00.16) Active Debug Code Info Disclosure
CVE-2026-73593
3 - Low
- September 29, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
Active Debug Code
Dell Secure Connect Gateway (<=5.34.00.15) Sensitive Info Leak
CVE-2026-73591
7.5 - High
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.
Inclusion of Sensitive Information in Source Code
Dell SCG Policy Manager <5.36 Weak Encoding Password Vulnerability
CVE-2026-73589
6.3 - Medium
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
Weak Encoding for Password
Dell SCG Policy Manager <5.34.00.16: Missing Auth for Critical Function
CVE-2026-73588
7.4 - High
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Missing Authentication for Critical Function
Dell SCG Policy Manager <5.34.00.16 Improper Cert Validation Vulnerability
CVE-2026-73587
6.8 - Medium
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.
Improper Certificate Validation
Dell SCG Policy Manager <5.34.00.16 Insufficient Session Expiration EOP
CVE-2026-73586
6.4 - Medium
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.
Insufficient Session Expiration
Dell SCG Policy Manager <5.34.00.16: Non-Canonical URL Path Auth Bypass
CVE-2026-71178
3.7 - Low
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Use of Non-Canonical URL Paths for Authorization Decisions
Dell SCG Policy Manager <=5.34.00.16: Improper UI Layer Restriction (CVE202671177)
CVE-2026-71177
5.4 - Medium
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session theft.
Clickjacking
Dell SCG Policy Manager <5.34.00.16 Improper Privilege Management Vulnerability
CVE-2026-61413
6.8 - Medium
- September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Improper Privilege Management
Dell SCG 5.0 OS Command Injection prior to 5.36.00.16/00
CVE-2026-79947
5.5 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to script injection.
SQL Injection
Dell SCG 5.0 Appliance OS Command Injection <5.36.00.16
CVE-2026-78484
5.5 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to command execution.
Command Injection
Dell SCG 5.0 Appliance <5.36.00.16 OS Command Injection
CVE-2026-79945
5.5 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to command execution.
Command Injection
Dell SCG 5.0 Appliance <5.36.00.16 OS Command Injection
CVE-2026-78493
5.5 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to command execution.
Command Injection
Dell SCG 5.0 HardCoded Key Vulnerability (pre5.36.00.16)
CVE-2026-79735
4.4 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Use of Hard-coded Cryptographic Key vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
Use of Hard-coded Cryptographic Key
Dell SCG 5.0 Appliance/App Priv Escalation before 5.36.00.16/00
CVE-2026-79693
3.4 - Low
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.
Least Privilege Violation
Exec with Unnecessary Privileges in Dell SCG 5.0 Appliance <5.36.00.16
CVE-2026-79942
3.4 - Low
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Execution with Unnecessary Privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.
Execution with Unnecessary Privileges
Dell SCG 5.0 Appliance/App <5.36.00.16/5.36.00.00 Least Privilege Violation
CVE-2026-79944
3.4 - Low
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Violation vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.
Least Privilege Violation
Dell SCG 5.0 XSS before 5.36.00.16 (App) Improper Neutralization
CVE-2026-79946
5.3 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Alternate XSS Syntax vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Improper Neutralization of Alternate XSS Syntax
Dell SCG 5.0 Appliance/App <5.36 cmd injection vulnerability
CVE-2026-79741
5.3 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Command Injection
OS Command Injection in Dell SCG 5.0 Appliance <5.36.00.16 / App <5.36.00.00
CVE-2026-79689
5.3 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Shell injection
Dell SCG 5.0 Command Injection Vulnerability < 5.36.00.16 (Appliance)
CVE-2026-79941
5.3 - Medium
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to script injection.
Command Injection
Dell SCG 5.0 Improper Cert Validation (pre-5.36.00.16/00)
CVE-2026-79690
3.7 - Low
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Improper Certificate Validation
Dell SCG 5.0 Appliance Unauth Remote Improper Cert Validation (pre5.36.00.16)
CVE-2026-79736
3.7 - Low
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Improper Certificate Validation
Dell SCG 5.0 <5.36.00.16: Improper Certificate Validation (ICV) Vulnerability
CVE-2026-79729
3.7 - Low
- September 09, 2026
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.
Improper Certificate Validation
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Dell Secure Connect Gateway or by Dell? Click the Watch button to subscribe.
