CVE-2026-78020

{
  "etk_id": "ETK-2026-1061",
  "cve_id": "CVE-2026-78020",
  "display_id": "CVE-2026-78020",
  "ghsa_id": "GHSA-4wmw-p7m3-h442",
  "euvd_id": "EUVD-2026-95570",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Improper certificate validation in SCG Policy Manager",
  "summary": "Dell Secure Connect Gateway (SCG) Policy Manager releases before 5.34.00.16 are affected by improper certificate validation. An unauthenticated attacker with remote access may cause denial of service, disclose information, or execute code.",
  "mitigation": "Upgrade SCG Policy Manager to version 5.36.00.16 or later. Until upgraded, restrict remote access to the management service to trusted networks and administrators.",
  "vendor": "Dell",
  "product": "Secure Connect Gateway (SCG) Policy Manager",
  "affected": [
    {
      "affected_notes": [
        ">= 0, < 5.36.00.16 or later"
      ],
      "affected_ranges": [],
      "ecosystem": null,
      "fixed_versions": [
        "5.36.00.16 or later"
      ],
      "package_name": "Secure Connect Gateway (SCG) Policy Manager",
      "purl": null
    }
  ],
  "cwes": [
    295
  ],
  "cvss_score": 7.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
  "epss_score": 0.0018,
  "epss_percentile": 0.0719,
  "epss_asof": "2026-10-20",
  "automation": "contextual",
  "check": true,
  "check_confidence_basis": "assessed",
  "exploit": false,
  "pipeline_minutes": 26.563477433333333,
  "t0_at": "2026-10-09T08:51:14.757000+00:00",
  "signals": {
    "check": {
      "at": "2026-10-09T10:10:21.947108+00:00",
      "days": 0.054944329953703706,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T08:51:14.757000+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-10-09T08:51:14.757000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-09T08:51:14.757000+00:00",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-78020"
    }
  }
}