dell secure-connect-gateway CVE-2026-78018 is a vulnerability in Dell Secure Connect Gateway
Published on October 9, 2026

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-78018 is exploitable with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
LOCAL
Attack Complexity:
HIGH
Privileges Required:
LOW
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

Insecure Default Initialization of Resource

The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.


Products Associated with CVE-2026-78018

Want to know whenever a new CVE is published for Dell Secure Connect Gateway? stack.watch will email you.

Dell Secure Connect Gateway
 

Affected Versions

Dell Secure Connect Gateway (SCG) Policy Manager: