CVE-2026-76114
Received Received - Intake

Cleartext Transmission of Sensitive Information in Dell Secure Connect Gateway Policy Manager

Vulnerability report for CVE-2026-76114, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-29

Last updated on: 2026-09-29

Assigner: Dell

Description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-29
Last Modified
2026-09-29
Generated
2026-09-29
AI Q&A
2026-09-29
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell secure_connect_gateway to 5.34.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-319 The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Secure Connect Gateway (SCG) Policy Manager before version 5.34.00.16 has a flaw where sensitive data is sent in cleartext during transmission. An attacker without authentication but with network access could intercept this data, leading to unauthorized information disclosure.

Impact Analysis

If you use Dell SCG Policy Manager versions prior to 5.34.00.16, sensitive information transmitted over the network could be exposed to attackers. This may include credentials, configuration details, or other confidential data, risking data breaches or unauthorized access.

Compliance Impact

This vulnerability could lead to non-compliance with GDPR and HIPAA due to unauthorized disclosure of sensitive data. GDPR requires protection of personal data, while HIPAA mandates safeguarding protected health information. A breach may result in legal penalties and loss of trust.

Mitigation Strategies

Update Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later to address the vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-76114. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart