CVE-2026-71178
Received Received - Intake

Unauthorized Access via Non-Canonical URL Paths in Dell Secure Connect Gateway

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Dell

Description
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
CVE-2026-71178
EUVD
EUVD-2026-85330

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell secure_connect_gateway to 5.34.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-647 The product defines policy namespaces and makes authorization decisions based on the assumption that a URL is canonical. This can allow a non-canonical URL to bypass the authorization.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Secure Connect Gateway (SCG) Policy Manager before version 5.34.00.16 has a flaw where non-canonical URL paths are used for authorization decisions. This allows an unauthenticated remote attacker to potentially bypass access controls and gain unauthorized access to the system.

Impact Analysis

An attacker could exploit this to access sensitive data or perform unauthorized actions on the SCG Policy Manager. The impact is limited as the CVSS score is low (3.7), but unauthorized access could still disrupt services or expose information.

Compliance Impact

This vulnerability could potentially lead to unauthorized access, which may violate data protection requirements under GDPR and HIPAA. Unauthorized access risks exposing sensitive personal or health data, leading to compliance breaches and regulatory penalties.

Mitigation Strategies

Update Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-71178. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart