Dell TechnologiesCVE-2026-73591

Dell Technologies Secure Connect Gateway Policy Manager: information disclosure

CVE-2026-73591 · Published Sep 23, 2026 · updated Sep 25, 2026

High7.5

Fix: upgrade to 5.36.00.16 or later or later

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information exposure.

Affected versions

Package	Affected	Fixed in
Secure Connect Gateway (SCG) Policy Manager Product	< 5.36.00.16 or later	5.36.00.16 or later

Details and references

CVSS 3.1: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Severity from: the vendor (its own CVE record or advisory)
Weakness: CWE-540

More Dell Technologies advisories

All Dell Technologies

Medium 6.4Sep 23

Dell Technologies Secure Connect: insufficient session expirationCVE-2026-73586fixed in 5.36.00.16 or later Medium 6.8Sep 23

Dell Technologies Secure Connect: improper certificate validationCVE-2026-73587fixed in 5.36.00.16 or later High 7.4Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: missing authenticationCVE-2026-73588fixed in 5.36.00.16 or later Medium 6.3Sep 23

Dell Technologies Secure Connect Gateway Policy Manager: information disclosureCVE-2026-73589fixed in 5.36.00.16 or later Medium 5.4Sep 23

Dell Technologies Secure Connect Gateway (SCG) Policy Manager: clickjackingCVE-2026-71177fixed in 5.36.00.16 or later Low 3.7Sep 23

Dell Secure Connect GatewayCVE-2026-71178fixed in 5.36.00.16 or later