dell-technologiesCVE-2026-61413
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability.
Medium6.8CVE-2026-61413 · Published Sep 23, 2026 · updated Sep 25, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Secure Connect Gateway (SCG) Policy Manager Vendor | < 5.36.00.16 or later | 5.36.00.16 or later |
Details and references
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- CVSS 3.1
- CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
- Severity from
- no source yet
- Weakness
- CWE-269
More dell-technologies advisories
All| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. CVE-2026-71177Medium5.4fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium5.4 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. CVE-2026-71178Low3.7fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Low3.7 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. CVE-2026-73586Medium6.4fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium6.4 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. CVE-2026-73587Medium6.8fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium6.8 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. CVE-2026-73588High7.4fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | High7.4 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. CVE-2026-73589Medium6.3fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium6.3 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |