CVE-2026-71177 — Dell / Secure Connect Gateway (SCG) Policy Manager

CVE-2026-71177

Dell / Secure Connect Gateway (SCG) Policy Manager PUBLISHED

Description (CNA)

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges and Session theft.

Affected (CNA)

Vendor / product	Versions
Dell / Secure Connect Gateway (SCG) Policy Manager	affected 0 before 5.36.00.16 or later

CWE

CWE-1021

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.