CVE-2026-78013: dell policy_manager_for_secure_connect_gateway

Vulnerability summary

CVE-2026-78013 is a medium (CVSS 6.3) vulnerability in dell policy_manager_for_secure_connect_gateway. EPSS estimates a 0.10% chance of exploitation in the next 30 days, higher than 1% of scored vulnerabilities.

Timeline

1. 09-10-2026
   PublishedVulnerability first disclosed.
2. 09-10-2026
   Last modifiedVulnerability information updated.

Description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service, Information disclosure, and Protection mechanism bypass.

• CWE-1188Initialization of a Resource with an Insecure DefaultThe product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.