CVE-2026-76769 is a medium severity (4.3) missing authorization flaw in Dell Secure Connect Gateway (SCG) Policy Manager. A low privileged user with remote access could potentially elevate privileges. The record says versions before 5.34.00.16 are affected. Update to 5.34.00.16 or later and check Dell's advisory DSA-2026-385.
What's affected
The record says Dell Secure Connect Gateway Policy Manager versions prior to 5.34.00.16 are affected. Fixed in 5.34.00.16, per the record.
Dell's own advisory page returned an access denied message when we tried to read it, so we could not confirm anything beyond the record. The record points to Dell's knowledge base article for DSA-2026-385, which covers multiple vulnerabilities in the product, so read it before you plan the update.
Where sources differ. We could not fetch the vendor page, so there is no second source to compare. The record gives 4.3 Medium with the vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N. Dell may rate it differently, and the advisory also lists other fixes, so check Dell's page for severity and versions.
How to check if you're exposed
Open the Policy Manager and read its version from the product's about or version screen, or from the package or appliance details your team uses to deploy it. Compare it with 5.34.00.16.
Also work out who can log in remotely and with what role. This flaw needs a low privileged account, so the question is how many accounts like that exist, and whether any are shared or stale.
If the Policy Manager is reachable from outside a management network, note that for the review. The record's vector is network based.
What to do now
- Read Dell's advisory DSA-2026-385 and confirm the fixed version for your deployment.
- Update Policy Manager to 5.34.00.16 or later.
- Review accounts with access to the Policy Manager and remove stale or shared low privilege logins.
- Limit network access to the management interface to the people and systems that need it.
- Record the version after the update.
Why it matters
The record calls it a missing authorization weakness, filed under CWE-862. In practice, an action or resource that should check whether the caller is allowed does not, so a user with a low role can reach something meant for a higher one.
The score is modest because the attacker needs an account first and the record rates the impact as low confidentiality only. Even so, privilege escalation in a policy tool matters, because policy tools sit close to what an organization trusts on its network. The record does not mark it as a CISA KEV entry. Treat it as a routine update, but do not leave it for the next yearly cycle.
Quick check
Which version fixes it?
The record says versions prior to 5.34.00.16 are affected. Confirm in Dell's advisory DSA-2026-385.
Do I need credentials to exploit it?
The record says a low privileged attacker with remote access, so yes, some account is needed.
Sources
Last reviewed: 18 October 2026.
