CVE-2026-78021
LowCVSS 3.7Summary
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to information disclosure and exposure.
Risk Assessment
An attacker could obtain sensitive information through error messages, potentially facilitating further attacks. The risk is high because it requires no authentication and is remotely exploitable.
Recommendation
Upgrade Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later. Until patched, restrict remote access to the management interface.
Other vulnerabilities in Dell Secure Connect Gateway
See all- CVE-2026-78017Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Check for Unusual or Exceptional Conditions vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to information tampering and protection mechanism bypass.
- CVE-2026-78016Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability. A low privileged attacker with remote access could exploit this vulnerability, leading to information exposure and information tampering.
- CVE-2026-78015Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Use of Less Trusted Source vulnerability. An unauthenticated attacker with remote access could exploit this vulnerability, leading to information tampering.
- CVE-2026-79732Low
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.xx contain an improper certificate validation vulnerability. An unauthenticated attacker with remote access could exploit it, leading to protection mechanism bypass.
Original NVD description (English source)
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Generation of Error Message Containing Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure and Information exposure.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS