Dell TechnologiesCVE-2026-73587

Dell Technologies Secure Connect: improper certificate validation

CVE-2026-73587 · Published Sep 23, 2026 · updated Sep 25, 2026

Medium6.8

Fix: upgrade to 5.36.00.16 or later or later

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.

Affected versions

Package	Affected	Fixed in
Secure Connect Gateway (SCG) Policy Manager Product	< 5.36.00.16 or later	5.36.00.16 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-295

More Dell Technologies advisories

All Dell Technologies

High 7.5Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73591fixed in 5.36.00.16 or later Medium 6.4Sep 23

Dell Technologies Secure Connect: insufficient session expirationCVE-2026-73586fixed in 5.36.00.16 or later High 7.4Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: missing authenticationCVE-2026-73588fixed in 5.36.00.16 or later Medium 6.3Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73589fixed in 5.36.00.16 or later Medium 5.4Sep 23

Dell Technologies Secure Connect Gateway (SCG) Policy Manager: clickjackingCVE-2026-71177fixed in 5.36.00.16 or later Low 3.7Sep 23

Dell Secure Connect GatewayCVE-2026-71178fixed in 5.36.00.16 or later