CVE-2026-78339: CWE-732: Incorrect Permission Assignment for Critical Resource in Dell Secure Connect Gateway (SCG) Policy Manager

CVE-2026-78339 describes an incorrect permission assignment for a critical resource in Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16. This vulnerability enables a low privileged attacker with local access to exploit the flaw, potentially leading to unauthorized access, information disclosure, and bypass of protection mechanisms. The CVSS v3.1 base score is 6.3, reflecting medium severity with attack vector local, high attack complexity, low privileges required, no user interaction, and impacts on confidentiality and integrity but not availability.

An attacker with low privileges and local access could exploit this vulnerability to gain unauthorized access to critical resources, disclose sensitive information, and bypass security protections within the Dell SCG Policy Manager. This could compromise confidentiality and integrity of the system but does not affect availability.

No explicit patch or remediation details are provided in the available data. Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until a fix is available, restrict local access to trusted users only and monitor for suspicious activity related to permission escalations.