CVE-2026-78023: CWE-639: Authorization Bypass Through User-Controlled Key in Dell Secure Connect Gateway (SCG) Policy Manager

CVE-2026-78023 is an authorization bypass vulnerability in Dell Secure Connect Gateway (SCG) Policy Manager prior to version 5.34.00.16. The flaw arises from improper authorization checks involving a user-controlled key, enabling a low privileged attacker with remote access to potentially elevate their privileges. The vulnerability is tracked under CWE-639 and has a CVSS v3.1 base score of 7.1, indicating high severity with network attack vector, low attack complexity, and no user interaction required.

An attacker with low privileges and remote access could exploit this vulnerability to bypass authorization controls and gain elevated privileges within the affected Dell SCG Policy Manager environment. This could lead to unauthorized access to sensitive functions or data, impacting confidentiality and integrity. Availability impact is not indicated.

No explicit patch or remediation details are provided in the available data. Since the vulnerability affects versions prior to 5.34.00.16, upgrading to version 5.34.00.16 or later is recommended if available. Patch status is not yet confirmed — check Dell's official advisory for current remediation guidance.