PULSEUnderground Intel

EN VIVO47señales / 24h

FEED

ransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***upransomsarcoma reclama a Ivan Smith Furniture · PH · Retail & E-Commerceransomwhitearmor reclama a Gamdom V2 · Otherransomemperador reclama a Holcim · CH · Manufacturingransomsafepay reclama a quevedo-ponce.com · EC · Otherransomsafepay reclama a mars-semi.com.tw · TW · Manufacturingransomsafepay reclama a Rood Trucking · US · Transportationransompayload reclama a Straze Garden Center · Retail & E-Commerceransompayload reclama a Kraft Lernen · DE · Educationransompayload reclama a SALEG (Sachsen-Anhaltische Landesentwicklungsgesellschaft mbH) · DE · Government & Defenseransomrhysida reclama a Phoenix Charter Academy · US · Educationransomauditteam reclama a Pe***CT · NLransomauditteam reclama a jl***om · SGransomauditteam reclama a hn***rgransomauditteam reclama a ro***upransomsarcoma reclama a Ivan Smith Furniture · PH · Retail & E-Commerceransomwhitearmor reclama a Gamdom V2 · Otherransomemperador reclama a Holcim · CH · Manufacturingransomsafepay reclama a quevedo-ponce.com · EC · Otherransomsafepay reclama a mars-semi.com.tw · TW · Manufacturingransomsafepay reclama a Rood Trucking · US · Transportation

← Todos los CVEs

CVE Watch13 oct 2026

CVE-2026-78339

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Res

CVSS

6.3

Medio

EPSS

0.1%

p0

KEV

—

Exploit Today

0

0-100

Publicado: 9 oct 2026 · Última mod.: 13 oct 2026 · CWE-732

EPSS · 30d

0.1%EPSS · 30 días0.1%

2026-10-102026-10-30

Descripción técnica

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Protection mechanism bypass, and Unauthorized access.

Referencias oficiales

www.dell.comhttps://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-1114995.5 MED

——0Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Protection mechanism bypass.1d CVE-2026-118574—

——1Incorrect Permission Assignment for Critical Resource vulnerability in Drupal S3 File System allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects S3 File System versions: from 0.0.0 to 3.12.0.1d CVE-2026-1070609.1 CRÍ

——1Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and preferences.1d CVE-2026-1070557.5 ALT

——1Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.1d CVE-2026-1070477.5 ALT

——11Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.1d CVE-2026-1070447.5 ALT

——2Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport mechanism.1d