Dell TechnologiesCVE-2026-73588

Dell Technologies Secure Connect Gateway Policy Manager: missing authentication

CVE-2026-73588 · Published Sep 23, 2026 · updated Sep 25, 2026

High7.4

Fix: upgrade to 5.36.00.16 or later or later

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected versions

Package	Affected	Fixed in
Secure Connect Gateway (SCG) Policy Manager Product	< 5.36.00.16 or later	5.36.00.16 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-306

More Dell Technologies advisories

All Dell Technologies

High 7.5Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73591fixed in 5.36.00.16 or later Medium 6.4Sep 23

Dell Technologies Secure Connect: insufficient session expirationCVE-2026-73586fixed in 5.36.00.16 or later Medium 6.8Sep 23

Dell Technologies Secure Connect: improper certificate validationCVE-2026-73587fixed in 5.36.00.16 or later Medium 6.3Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73589fixed in 5.36.00.16 or later Medium 5.4Sep 23

Dell Technologies Secure Connect Gateway (SCG) Policy Manager: clickjackingCVE-2026-71177fixed in 5.36.00.16 or later Low 3.7Sep 23

Dell Secure Connect GatewayCVE-2026-71178fixed in 5.36.00.16 or later