CVE-2026-78015
Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-09

Last updated on: 2026-10-13

Assigner: Dell

Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information tampering.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-13
Generated
2026-10-19
AI Q&A
2026-10-09
EPSS Evaluated
2026-10-18
NVD
CVE-2026-78015
EUVD
EUVD-2026-95565

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell policy_manager_for_secure_connect_gateway to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-348 The product has two different sources of the same data or information, but it uses the source that has less support for verification, is less trusted, or is less resistant to attack.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Secure Connect Gateway (SCG) Policy Manager, versions before 5.34.00.16, has a vulnerability where an unauthenticated remote attacker could tamper with information by exploiting a less trusted source issue.

Detection Guidance

Detection of this vulnerability requires checking the version of Dell Secure Connect Gateway (SCG) Policy Manager. If your system is running a version prior to 5.34.00.16, it is vulnerable. Use the following command to check the installed version: scg-policy-manager --version. Compare the output with 5.34.00.16 to determine if an update is needed.

Impact Analysis

An attacker could modify sensitive data without authentication, potentially leading to incorrect configurations, data corruption, or unauthorized changes in the SCG Policy Manager.

Compliance Impact

This vulnerability could compromise data integrity, which is critical for GDPR and HIPAA compliance. Unauthorized tampering may violate integrity requirements and lead to non-compliance penalties.

Mitigation Strategies

Update Dell Secure Connect Gateway (SCG) Policy Manager to version 5.34.00.16 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78015. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart