Dell SCG Policy Manager <5.34.00.16 Failing Open Vulnerability
CVE-2026-78022 Published on October 9, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Not Failing Securely ('Failing Open') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Protection mechanism bypass.
Vulnerability Analysis
CVE-2026-78022 is exploitable with network access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
What is a Failing Open Vulnerability?
When the product encounters an error condition or failure, its design requires it to fall back to a state that is less secure than other options that are available, such as selecting the weakest encryption algorithm or using the most permissive access control restrictions. By entering a less secure state, the product inherits the weaknesses associated with that state, making it easier to compromise. At the least, it causes administrators to have a false sense of security. This weakness typically occurs as a result of wanting to "fail functional" to minimize administration and support costs, instead of "failing safe."
CVE-2026-78022 has been classified to as a Failing Open vulnerability or weakness.
Products Associated with CVE-2026-78022
Want to know whenever a new CVE is published for Dell Secure Connect Gateway? stack.watch will email you.
Affected Versions
Dell Secure Connect Gateway (SCG) Policy Manager:- Before 5.36.00.16 or later is affected.