# CVE-2026-71178: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL…

Source: https://junglewise.ai/threats/cve-2026-71178-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-23  
License: CC BY 4.0 with a link back

CVE-2026-71178 · Severity: low · CVSS 3.7 · Published 2026-09-23

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Technologies: [Dell Policy Manager For Secure Connect Gateway](https://junglewise.ai/threats/technologies/policy-manager-for-secure-connect-gateway). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-71178 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-71178 being exploited in the wild.

**How severe is CVE-2026-71178?** Low severity, with a CVSS score of 3.7, published 23 September 2026.

**Which products and versions are affected?** Dell Policy Manager For Secure Connect Gateway. The advisory does not name versions.

**Is there a fix for CVE-2026-71178?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**Am I affected by CVE-2026-71178?** Check whether you run Dell Policy Manager For Secure Connect Gateway. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Affected products

- Dell Policy Manager For Secure Connect Gateway

## Related threats

- [Dell Secure Connect Gateway Policy Manager incorrect authorization](https://junglewise.ai/threats/cve-2026-78341-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager path traversal](https://junglewise.ai/threats/cve-2026-78340-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager incorrect permission assignment](https://junglewise.ai/threats/cve-2026-78339-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager server-side request forgery](https://junglewise.ai/threats/cve-2026-78027-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager authorization bypass](https://junglewise.ai/threats/cve-2026-78026-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
