← Vulnerability database

CVE-2026-76779

Critical
9.8 CVSS v3.1
Published
Oct 9, 2026
Updated
Oct 13, 2026
Vendor
Dell
Affected versions
See affected products
Weakness
CWE-307

Summary

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.

Severity

Critical (9.8)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

  • Dell Policy Manager For Secure Connect Gateway < 5.36.00.16

Exploitation status

Unknown

Technical details

Technical analysis has not been written for this record yet.

Mitigation & remediation

Follow the vendor advisory linked below for patches and workarounds.

References

Source NIST NVD
Last syncedOct 28, 2026 19:45 UTC
Reviewed Oct 28, 2026
Page updatedOct 29, 2026