CVE-2026-78013: CWE-1188: Initialization of a Resource with an Insecure Default in Dell Secure Connect Gateway (SCG) Policy Manager

CVE-2026-78013 is an Initialization of a Resource with an Insecure Default vulnerability (CWE-1188) in Dell Secure Connect Gateway (SCG) Policy Manager. It affects versions prior to 5.34.00.16. A high privileged attacker with local access could exploit this vulnerability to cause denial of service, information disclosure, and bypass protection mechanisms. The CVSS 3.1 base score is 5.2, reflecting medium severity with attack vector local, high attack complexity, high privileges required, no user interaction, unchanged scope, high confidentiality impact, low integrity impact, and low availability impact.

The vulnerability allows a high privileged local attacker to potentially disrupt service (denial of service), access sensitive information (information disclosure), and bypass security protections within the affected Dell SCG Policy Manager. This could compromise the confidentiality, integrity, and availability of the system to varying degrees as indicated by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or fix information is provided, organizations should monitor Dell's official advisories for updates. Until a fix is available, restricting local access to trusted administrators and applying principle of least privilege may reduce risk.