CVE-2026-78340: CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Dell Secure Connect Gateway (SCG) Policy Manager

CVE-2026-78340 is a path traversal vulnerability in Dell Secure Connect Gateway (SCG) Policy Manager versions before 5.34.00.16. This vulnerability arises from improper limitation of a pathname to a restricted directory, allowing an attacker with high privileges and local access to potentially execute arbitrary code and access the filesystem. The vulnerability requires user interaction and has a CVSS 3.1 base score of 6.3 with vector AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H.

An attacker with high privileges and local access could exploit this vulnerability to execute arbitrary code and gain unauthorized access to the filesystem. This could lead to compromise of the affected system's confidentiality, integrity, and availability. However, exploitation requires user interaction and high privileges, limiting the ease of exploitation.

No explicit patch or remediation information is provided in the vendor advisory. Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to trusted users and monitor for suspicious activity requiring high privileges and user interaction.