Secure Connect Gateway CVE-2026-78341

Exploitation requires the attacker to already possess high-privilege authenticated access to the Dell SCG Policy Manager (CVSS PR:H; description: 'high privileged attacker with remote access'); it is not exploitable by anonymous or low-privileged users. The vulnerable path is network-reachable (AV:N) and low-complexity (AC:L) with no user interaction, so once high privileges are held, abuse is straightforward. The limiting factors defenders should weigh: the high-privilege prerequisite sharply narrows the attacker population (typically a malicious or compromised admin/operator), and remediation depends on upgrading to the fixed Policy Manager build cited by Dell (verify whether 5.34.00.16 or 5.36.00.16 is authoritative).

Signals are consistent and point to a moderate, not urgent, priority. The CVSS 3.1 vector (AV:N/AC:L/PR:H/UI:N, base 7.2 High) indicates a network-reachable, low-complexity flaw that nonetheless requires PR:H - the attacker must already hold high privileges, which the description confirms ('a high privileged attacker with remote access'). This authentication prerequisite is the single biggest risk-dampener and is corroborated across both the vector and the description, so there is no contradiction to flag. Exploitation-likelihood signals reinforce low urgency: EPSS is 0.27% (18th percentile), SSVC lists Exploitation=none and Automatable=no, and there is no CISA KEV listing and no public exploit identified. The only elevated signal is impact - CVSS C:H/I:H/A:H and SSVC Technical Impact=total - meaning that IF the privilege precondition is met, consequences are severe (full privilege escalation / unauthorized access). Net: this is a legitimately high-impact but low-probability, high-barrier issue best treated as a routine-to-prioritized patch for Dell SCG Policy Manager operators rather than an emergency. One data conflict to verify: the CVE description states fixed version 'prior to 5.34.00.16' while the EUVD affected-version data cites '<5.36.00.16' - confirm the authoritative fixed build with Dell DSA-2026-385 before remediation.

An attacker who has already obtained high-privileged (e.g., administrative-tier) access to the Dell SCG Policy Manager interface over the network sends requests that the application fails to authorize correctly (CWE-863). By exploiting the missing/incorrect authorization check, the attacker performs actions or reaches resources beyond their intended scope, achieving further privilege elevation and unauthorized access. No public exploit code or active exploitation has been identified at time of analysis.