Secure Connect Gateway CVE-2026-78025

The attacker needs network reachability to the Dell Secure Connect Gateway (SCG) Policy Manager management service on an instance running a version prior to 5.34.00.16. No authentication, credentials, or user interaction are required (PR:N/UI:N) because a critical function lacks an authentication check (CWE-306). The primary limiting factor is network exposure: SCG Policy Manager is a management/telemetry appliance typically deployed on internal or restricted management networks, so exploitation requires the attacker to already be positioned on a network that can route to the service - internet-facing exposure would substantially increase real-world risk. Impact is limited to information disclosure and access bypass; the vendor vector indicates no integrity or availability impact.

Signals are moderately consistent and point to a real but bounded priority. The provided CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N, base 7.5 HIGH) indicates a network-reachable, low-complexity, unauthenticated flaw with high confidentiality impact but NO integrity or availability impact - the HIGH score is driven entirely by information disclosure. This aligns with the CWE-306 (Missing Authentication for Critical Function) classification and the description's 'unauthenticated attacker with remote access.' However, the description also claims 'Protection mechanism bypass' and 'Unauthorized access,' which hint at integrity consequences that the vendor's own vector scores as I:N - this is a mild internal tension worth verifying with Dell, as the real-world impact may extend beyond pure disclosure. No EPSS score, KEV listing, or POC indicator was supplied in the input; exploitation probability cannot be quantified and there is no public exploit identified at time of analysis. Net: a genuinely exploitable unauthenticated flaw in an enterprise appliance, deserving prompt patching, but with no evidence of active exploitation and impact currently confined to confidentiality.

A remote attacker who can reach the SCG Policy Manager's network interface sends requests directly to a critical function that fails to enforce authentication, retrieving sensitive configuration or telemetry data and bypassing intended access protections - all without credentials or user interaction. No public exploit code was identified in the provided data, but the low attack complexity (AC:L) and absence of authentication (PR:N) make reliable exploitation straightforward for anyone with network access to the management service.