Secure Connect Gateway EUVD-2026-95563

Exploitation requires network reachability to the Dell Secure Connect Gateway (SCG) Policy Manager authentication interface on a version prior to the fixed release (vendor states 5.34.00.16; EUVD data indicates 5.36.00.16 - verify). The specific precondition is that the authentication mechanism fails to limit excessive/repeated authentication attempts, so the attacker needs no prior credentials or user interaction (PR:N/UI:N) but DOES need to conduct many authentication attempts to brute-force or bypass the protection. LIMITING factors: success depends on weak/guessable or discoverable credentials and on the attacker sustaining a high volume of attempts; SSVC rates the attack as NOT automatable, indicating it is not a single-request exploit, and deployments that place the Policy Manager behind network restrictions, a VPN, or an upstream rate-limiting proxy substantially reduce exposure.

Signals conflict and should be weighed carefully. The CVSS 3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N) describes a trivially remote, unauthenticated, low-complexity flaw with total CIA impact, and SSVC rates Technical Impact as 'total' - which looks like top-tier priority on paper. However, the underlying weakness is CWE-307 (Improper Restriction of Excessive Authentication Attempts), i.e. missing rate-limiting/lockout, so the '9.8 with C:H/I:H/A:H' rating assumes the attacker ultimately succeeds at brute-forcing credentials rather than achieving instant code execution - the high impact is a downstream consequence, not a single-shot compromise. Lower-level signals temper the urgency: EPSS is only 0.26% (16th percentile), SSVC marks Exploitation as 'none' and Automatable as 'no', there is no CISA KEV listing and no public exploit identified. The low EPSS and 'not automatable' SSVC rating are notably at odds with a 9.8 rating, which is consistent with a brute-force/lockout bypass that requires sustained, non-trivial effort rather than mass, drive-by exploitation. Net: treat as a genuine patch-worthy issue for an internet-facing management component, but it is a 'high-CVSS, currently-low-real-world-risk' case rather than an actively exploited emergency. Note also a version-data conflict (see confidence_notes) that should be resolved against the Dell advisory before remediation.

A remote, unauthenticated attacker reaches the Dell Secure Connect Gateway Policy Manager login/authentication interface over the network and, because excessive authentication attempts are not properly restricted, launches a sustained credential brute-force or guessing campaign without being locked out. Successful authentication yields unauthorized access and elevation of privileges by bypassing the intended protection mechanism. No public proof-of-concept or active exploitation has been identified, and SSVC rates the attack as not automatable, implying meaningful effort per target.