CVE-2026-71177: Medium severity Dell Secure Connect Gateway (SCG) Policy Manager vulnerability
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session theft.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Secure Connect Gateway (SCG) Policy Managerto a version that resolves this vulnerability.Fixed in 5.34.00.16
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs remote access to Dell Secure Connect Gateway Policy Manager and low-privileged credentials. The issue does not require user interaction.
Which versions need remediation?
Dell Secure Connect Gateway Policy Manager versions earlier than 5.34.00.16 are affected. Upgrade to version 5.34.00.16 or later.
What is the likely impact of successful exploitation?
Successful exploitation could allow elevation of privileges and theft of a session. The supplied severity vector indicates low impacts to confidentiality and integrity, with no availability impact.