Dell TechnologiesCVE-2026-71178

Dell Secure Connect Gateway

CVE-2026-71178 · Published Sep 23, 2026 · updated Sep 26, 2026

Low3.7

Fix: upgrade to 5.36.00.16 or later or later

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected versions

Package	Affected	Fixed in
Secure Connect Gateway (SCG) Policy Manager Product	< 5.36.00.16 or later	5.36.00.16 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-647

More Dell Technologies advisories

All Dell Technologies

High 7.5Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73591fixed in 5.36.00.16 or later Medium 6.4Sep 23

Dell Technologies Secure Connect: insufficient session expirationCVE-2026-73586fixed in 5.36.00.16 or later Medium 6.8Sep 23

Dell Technologies Secure Connect: improper certificate validationCVE-2026-73587fixed in 5.36.00.16 or later High 7.4Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: missing authenticationCVE-2026-73588fixed in 5.36.00.16 or later Medium 6.3Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73589fixed in 5.36.00.16 or later Medium 5.4Sep 23

Dell Technologies Secure Connect Gateway (SCG) Policy Manager: clickjackingCVE-2026-71177fixed in 5.36.00.16 or later