CVE-2026-76779

{
  "etk_id": "ETK-2026-1059",
  "cve_id": "CVE-2026-76779",
  "display_id": "CVE-2026-76779",
  "ghsa_id": "GHSA-2fw7-4gg3-crqx",
  "euvd_id": "EUVD-2026-95563",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authentication-attempt restriction flaw in SCG Policy Manager",
  "summary": "Dell Secure Connect Gateway (SCG) Policy Manager is affected by insufficient limits on authentication attempts. An unauthenticated attacker with remote access may be able to bypass protections, obtain unauthorized access, or elevate privileges.",
  "mitigation": "Upgrade Secure Connect Gateway (SCG) Policy Manager to version 5.36.00.16 or later. Restrict remote access to the management interface until the update is applied.",
  "vendor": "Dell",
  "product": "Secure Connect Gateway (SCG) Policy Manager",
  "affected": [
    {
      "affected_notes": [
        ">= 0, < 5.36.00.16 or later"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [
        "5.36.00.16 or later"
      ],
      "package_name": "Secure Connect Gateway (SCG) Policy Manager",
      "purl": null
    }
  ],
  "cwes": [
    307
  ],
  "cvss_score": 7.4,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
  "epss_score": 0.0027,
  "epss_percentile": 0.1795,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 15.867841283333334,
  "t0_at": "2026-10-09T08:22:40.495000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-09T09:07:57.095541+00:00",
      "days": 0.031442135891203704,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T08:22:40.495000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-09T08:22:40.495000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T08:22:40.495000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-76779"
    }
  }
}