dell-technologiesCVE-2026-73587
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability.
Medium6.8CVE-2026-73587 · Published Sep 23, 2026 · updated Sep 25, 2026
Affected versions
| Package | Affected | Fixed in |
|---|---|---|
| Secure Connect Gateway (SCG) Policy Manager Vendor | < 5.36.00.16 or later | 5.36.00.16 or later |
Details and references
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.
- CVSS 3.1
- CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- Severity from
- no source yet
- Weakness
- CWE-295
More dell-technologies advisories
All| Date | Advisory | Severity | Fixed in |
|---|---|---|---|
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Privilege Management vulnerability. CVE-2026-61413Medium6.8fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium6.8 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Rendered UI Layers or Frames vulnerability. CVE-2026-71177Medium5.4fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium5.4 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. CVE-2026-71178Low3.7fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Low3.7 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. CVE-2026-73586Medium6.4fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium6.4 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. CVE-2026-73588High7.4fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | High7.4 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |
| Sep 23 | Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. CVE-2026-73589Medium6.3fixed in Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later | Medium6.3 | Secure Connect Gateway (SCG) Policy Manager 5.36.00.16 or later |