SCG Policy Manager EUVD-2026-85326

Requires an attacker who already holds a low-privilege authenticated account on Dell Secure Connect Gateway (SCG) Policy Manager at a version prior to 5.34.00.16, with network reachability to the management interface (AV:N, PR:L). Exploitation is rated high-complexity (AC:H), indicating a non-trivial precondition - such as specific application state, timing, or configuration - must be met beyond simply issuing a request; it is not a one-shot deterministic exploit. No user interaction is required (UI:N). Limiting factors: the mandatory low-privilege foothold and the AC:H condition meaningfully constrain real-world exploitability; the flaw cannot be triggered by a fully unauthenticated remote attacker.

This is a moderate-severity issue whose real-world urgency is tempered by its own CVSS vector. The vendor-assigned CVSS:3.1 vector (AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N, base 6.8) requires an attacker who is already authenticated at low privilege (PR:L) and models exploitation as high-complexity (AC:H), meaning success depends on conditions outside the attacker's direct control (e.g., timing, specific state, or a non-trivial precondition) rather than a simple repeatable request. No EPSS score, no CISA KEV listing, and no public proof-of-concept were provided in the intelligence set, so there is no signal of active or imminent exploitation - no public exploit identified at time of analysis. The impact half is meaningful (C:H/I:H, A:N - confidentiality and integrity fully compromised via improper privilege management, but no availability impact claimed), so a successful exploit is consequential, but the combination of required prior authentication plus high attack complexity places this below drop-everything priority. Treat it as a standard-cadence patch for the affected Dell SCG Policy Manager instances, prioritized higher where the appliance is internet-adjacent or where low-privilege accounts are broadly provisioned. Note one labeling conflict: the input Tags include 'Authentication Bypass', which conflicts with both CWE-269 (Improper Privilege Management) and the PR:L vector - this is a privilege/authorization escalation from an authenticated foothold, not an authentication bypass.

A user holding a low-privilege account on the Dell SCG Policy Manager (or who has obtained such credentials) sends crafted requests over the network to abuse improper privilege management and elevate their effective access. Because CVSS marks AC:H, the attacker must satisfy a non-trivial precondition (specific state or timing) rather than firing a single deterministic request, but success yields unauthorized access to data and functions (C:H/I:H). No public proof-of-concept was provided in the intelligence set.