CVE-2026-61413
MediumCVSS 6.8Exploitation Probability (EPSS)
Low risk10th percentile - higher than 10% of all known CVEs
Summary
Dell Secure Connect Gateway (SCG) Policy Manager before version 5.34.00.16 contains an improper privilege management vulnerability. A low-privileged attacker with remote access could gain unauthorized access.
Risk Assessment
Unauthorized access may lead to data confidentiality or integrity breaches, as well as privilege escalation.
Recommendation
Upgrade Dell SCG Policy Manager to version 5.34.00.16 or later.
Other vulnerabilities in Dell Secure Connect Gateway (SCG) Policy Manager
See all- CVE-2026-73596Low
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could exploit this to achieve elevation of privileges, information tampering, protection mechanism bypass, and unauthorized access.
- CVE-2026-73593Low
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Active Debug Code vulnerability. A high privileged attacker with local access could exploit this to cause information disclosure, information tampering, protection mechanism bypass, and unauthorized access.
Original NVD description (English source)
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS