CVE-2026-78019
Undergoing Analysis Undergoing Analysis - In Progress

BaseFortify

Publication date: 2026-10-09

Last updated on: 2026-10-13

Assigner: Dell

Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Functionality from Untrusted Control Sphere vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Filesystem access for attacker, and Remote execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-09
Last Modified
2026-10-13
Generated
2026-10-19
AI Q&A
2026-10-09
EPSS Evaluated
2026-10-18
NVD
CVE-2026-78019
EUVD
EUVD-2026-95569

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell policy_manager_for_secure_connect_gateway to 5.36.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-829 The product imports, requires, or includes executable functionality (such as a library) from a source that is outside of the intended control sphere.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Secure Connect Gateway (SCG) Policy Manager before version 5.34.00.16 has a vulnerability where untrusted input is used in a way that allows attackers with low privileges and remote access to escalate privileges, access files, and execute remote commands.

Detection Guidance

Detection requires checking the installed version of Dell Secure Connect Gateway (SCG) Policy Manager. If the version is prior to 5.34.00.16, the system is vulnerable. No specific commands are provided in the context.

Impact Analysis

An attacker could gain elevated privileges, access sensitive files on the system, and remotely execute arbitrary code. This could lead to data breaches, unauthorized system control, or further network compromise.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating GDPR (data protection) and HIPAA (health information privacy) requirements. Non-compliance may result in legal penalties, fines, or reputational damage.

Mitigation Strategies

Update Dell Secure Connect Gateway (SCG) Policy Manager to version 5.34.00.16 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-78019. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart