{"schemaVersion":2,"id":"CVE-2026-73595","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.","dates":{"published":"2026-09-29T11:39:50.775Z","modified":"2026-09-30T03:56:00.985Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":9.8,"severity":"critical","version":"3.1","versionLabel":"v3.1","source":"NVD","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","computed":false,"selection":"backend-summary"},"metrics":[{"version":"3.1","versionLabel":"v3.1","source":"CVE.org","score":4.7,"severity":"medium","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","exploitability":null,"impact":null,"computed":false},{"version":"3.1","versionLabel":"v3.1","source":"NVD","score":9.8,"severity":"critical","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.00106,"percentile":0.01047,"severity":"low","asOf":"2026-10-15T00:00:00.000Z","change":{"pp":null,"baselineDate":null,"baselineScore":null},"history":[{"date":"2026-09-30T00:00:00.000Z","score":0.00106,"percentile":0.01028},{"date":"2026-10-01T00:00:00.000Z","score":0.00106,"percentile":0.01026},{"date":"2026-10-02T00:00:00.000Z","score":0.00106,"percentile":0.01026},{"date":"2026-10-03T00:00:00.000Z","score":0.00106,"percentile":0.01024},{"date":"2026-10-04T00:00:00.000Z","score":0.00106,"percentile":0.01023},{"date":"2026-10-05T00:00:00.000Z","score":0.00106,"percentile":0.01024},{"date":"2026-10-06T00:00:00.000Z","score":0.00106,"percentile":0.01029},{"date":"2026-10-07T00:00:00.000Z","score":0.00106,"percentile":0.01024},{"date":"2026-10-08T00:00:00.000Z","score":0.00106,"percentile":0.01036},{"date":"2026-10-09T00:00:00.000Z","score":0.00106,"percentile":0.01046},{"date":"2026-10-10T00:00:00.000Z","score":0.00106,"percentile":0.01049},{"date":"2026-10-11T00:00:00.000Z","score":0.00106,"percentile":0.01048},{"date":"2026-10-12T00:00:00.000Z","score":0.00106,"percentile":0.01047},{"date":"2026-10-13T00:00:00.000Z","score":0.00106,"percentile":0.01049},{"date":"2026-10-14T00:00:00.000Z","score":0.00106,"percentile":0.01045},{"date":"2026-10-15T00:00:00.000Z","score":0.00106,"percentile":0.01047}],"last30":[{"date":"2026-09-30T00:00:00.000Z","score":0.00106,"percentile":0.01028},{"date":"2026-10-01T00:00:00.000Z","score":0.00106,"percentile":0.01026},{"date":"2026-10-02T00:00:00.000Z","score":0.00106,"percentile":0.01026},{"date":"2026-10-03T00:00:00.000Z","score":0.00106,"percentile":0.01024},{"date":"2026-10-04T00:00:00.000Z","score":0.00106,"percentile":0.01023},{"date":"2026-10-05T00:00:00.000Z","score":0.00106,"percentile":0.01024},{"date":"2026-10-06T00:00:00.000Z","score":0.00106,"percentile":0.01029},{"date":"2026-10-07T00:00:00.000Z","score":0.00106,"percentile":0.01024},{"date":"2026-10-08T00:00:00.000Z","score":0.00106,"percentile":0.01036},{"date":"2026-10-09T00:00:00.000Z","score":0.00106,"percentile":0.01046},{"date":"2026-10-10T00:00:00.000Z","score":0.00106,"percentile":0.01049},{"date":"2026-10-11T00:00:00.000Z","score":0.00106,"percentile":0.01048},{"date":"2026-10-12T00:00:00.000Z","score":0.00106,"percentile":0.01047},{"date":"2026-10-13T00:00:00.000Z","score":0.00106,"percentile":0.01049},{"date":"2026-10-14T00:00:00.000Z","score":0.00106,"percentile":0.01045},{"date":"2026-10-15T00:00:00.000Z","score":0.00106,"percentile":0.01047}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[],"exploitCount":0,"weaknesses":[{"id":"CWE-494","name":"Download of Code Without Integrity Check","description":"The product downloads source code or an executable from a remote location and executes the code without sufficiently verifying the origin and integrity of the code.","type":"weakness","status":"Draft","abstraction":"Base","likelihoodOfExploit":"Medium","url":"https://cwe.mitre.org/data/definitions/494.html","capec":[{"id":"CAPEC-184","name":"Software Integrity Attack","url":"https://capec.mitre.org/data/definitions/184.html"},{"id":"CAPEC-185","name":"Malicious Software Download","url":"https://capec.mitre.org/data/definitions/185.html"},{"id":"CAPEC-186","name":"Malicious Software Update","url":"https://capec.mitre.org/data/definitions/186.html"},{"id":"CAPEC-187","name":"Malicious Automated Software Update via Redirection","url":"https://capec.mitre.org/data/definitions/187.html"},{"id":"CAPEC-533","name":"Malicious Manual Software Update","url":"https://capec.mitre.org/data/definitions/533.html"},{"id":"CAPEC-538","name":"Open-Source Library Manipulation","url":"https://capec.mitre.org/data/definitions/538.html"},{"id":"CAPEC-657","name":"Malicious Automated Software Update via Spoofing","url":"https://capec.mitre.org/data/definitions/657.html"},{"id":"CAPEC-662","name":"Adversary in the Browser (AiTB)","url":"https://capec.mitre.org/data/definitions/662.html"},{"id":"CAPEC-691","name":"Spoof Open-Source Software Metadata","url":"https://capec.mitre.org/data/definitions/691.html"},{"id":"CAPEC-692","name":"Spoof Version Control System Commit Metadata","url":"https://capec.mitre.org/data/definitions/692.html"},{"id":"CAPEC-693","name":"StarJacking","url":"https://capec.mitre.org/data/definitions/693.html"},{"id":"CAPEC-695","name":"Repo Jacking","url":"https://capec.mitre.org/data/definitions/695.html"}],"techniques":[{"id":"T1072","name":"Software Deployment Tools","url":"https://attack.mitre.org/techniques/T1072/","tactics":[{"id":"TA0104","name":"Execution"},{"id":"TA0109","name":"Lateral Movement"}]},{"id":"T1185","name":"Browser Session Hijacking","url":"https://attack.mitre.org/techniques/T1185/","tactics":[{"id":"TA0100","name":"Collection"}]},{"id":"T1195.001","name":"Compromise Software Dependencies and Development Tools","url":"https://attack.mitre.org/techniques/T1195/001/","tactics":[{"id":"TA0108","name":"Initial Access"}]},{"id":"T1195.002","name":"Compromise Software Supply Chain","url":"https://attack.mitre.org/techniques/T1195/002/","tactics":[{"id":"TA0108","name":"Initial Access"}]}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SBV","name":"Service Binary Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SBV/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]}],"ttp":{"capecs":[{"id":"CAPEC-184","name":"Software Integrity Attack","url":"https://capec.mitre.org/data/definitions/184.html","weaknessIds":["CWE-494"],"techniqueIds":[]},{"id":"CAPEC-185","name":"Malicious Software Download","url":"https://capec.mitre.org/data/definitions/185.html","weaknessIds":["CWE-494"],"techniqueIds":[]},{"id":"CAPEC-186","name":"Malicious Software Update","url":"https://capec.mitre.org/data/definitions/186.html","weaknessIds":["CWE-494"],"techniqueIds":["T1195.002"]},{"id":"CAPEC-187","name":"Malicious Automated Software Update via Redirection","url":"https://capec.mitre.org/data/definitions/187.html","weaknessIds":["CWE-494"],"techniqueIds":["T1072"]},{"id":"CAPEC-533","name":"Malicious Manual Software Update","url":"https://capec.mitre.org/data/definitions/533.html","weaknessIds":["CWE-494"],"techniqueIds":[]},{"id":"CAPEC-538","name":"Open-Source Library Manipulation","url":"https://capec.mitre.org/data/definitions/538.html","weaknessIds":["CWE-494"],"techniqueIds":["T1195.001"]},{"id":"CAPEC-657","name":"Malicious Automated Software Update via Spoofing","url":"https://capec.mitre.org/data/definitions/657.html","weaknessIds":["CWE-494"],"techniqueIds":["T1072"]},{"id":"CAPEC-662","name":"Adversary in the Browser (AiTB)","url":"https://capec.mitre.org/data/definitions/662.html","weaknessIds":["CWE-494"],"techniqueIds":["T1185"]},{"id":"CAPEC-691","name":"Spoof Open-Source Software Metadata","url":"https://capec.mitre.org/data/definitions/691.html","weaknessIds":["CWE-494"],"techniqueIds":["T1195.001","T1195.002"]},{"id":"CAPEC-692","name":"Spoof Version Control System Commit Metadata","url":"https://capec.mitre.org/data/definitions/692.html","weaknessIds":["CWE-494"],"techniqueIds":[]},{"id":"CAPEC-693","name":"StarJacking","url":"https://capec.mitre.org/data/definitions/693.html","weaknessIds":["CWE-494"],"techniqueIds":[]},{"id":"CAPEC-695","name":"Repo Jacking","url":"https://capec.mitre.org/data/definitions/695.html","weaknessIds":["CWE-494"],"techniqueIds":["T1195.001"]}],"techniques":[{"id":"T1072","name":"Software Deployment Tools","url":"https://attack.mitre.org/techniques/T1072/","weaknessIds":["CWE-494"],"capecIds":["CAPEC-187","CAPEC-657"],"tactics":[{"id":"TA0104","name":"Execution"},{"id":"TA0109","name":"Lateral Movement"}],"countermeasures":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SBV","name":"Service Binary Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SBV/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]},{"id":"T1185","name":"Browser Session Hijacking","url":"https://attack.mitre.org/techniques/T1185/","weaknessIds":["CWE-494"],"capecIds":["CAPEC-662"],"tactics":[{"id":"TA0100","name":"Collection"}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]},{"id":"T1195.001","name":"Compromise Software Dependencies and Development Tools","url":"https://attack.mitre.org/techniques/T1195/001/","weaknessIds":["CWE-494"],"capecIds":["CAPEC-538","CAPEC-691","CAPEC-695"],"tactics":[{"id":"TA0108","name":"Initial Access"}],"countermeasures":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]},{"id":"T1195.002","name":"Compromise Software Supply Chain","url":"https://attack.mitre.org/techniques/T1195/002/","weaknessIds":["CWE-494"],"capecIds":["CAPEC-186","CAPEC-691"],"tactics":[{"id":"TA0108","name":"Initial Access"}],"countermeasures":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]}],"countermeasures":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SBV","name":"Service Binary Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SBV/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}],"countermeasuresByTactic":[{"tactic":"Harden","items":[{"id":"D3-FE","name":"File Encryption","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-FE/"},{"id":"D3-SU","name":"Software Update","tactic":"Harden","url":"https://d3fend.mitre.org/technique/d3f:D3-SU/"}]},{"tactic":"Detect","items":[{"id":"D3-APCA","name":"Application Protocol Command Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-APCA/"},{"id":"D3-CSPP","name":"Client-server Payload Profiling","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-CSPP/"},{"id":"D3-FA","name":"File Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FA/"},{"id":"D3-FIM","name":"File Integrity Monitoring","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-FIM/"},{"id":"D3-NTCD","name":"Network Traffic Community Deviation","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTCD/"},{"id":"D3-NTSA","name":"Network Traffic Signature Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-NTSA/"},{"id":"D3-PHDURA","name":"Per Host Download-Upload Ratio Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PHDURA/"},{"id":"D3-PMAD","name":"Protocol Metadata Anomaly Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-PMAD/"},{"id":"D3-RTSD","name":"Remote Terminal Session Detection","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-RTSD/"},{"id":"D3-SBV","name":"Service Binary Verification","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-SBV/"},{"id":"D3-UGLPA","name":"User Geolocation Logon Pattern Analysis","tactic":"Detect","url":"https://d3fend.mitre.org/technique/d3f:D3-UGLPA/"}]},{"tactic":"Isolate","items":[{"id":"D3-CF","name":"Content Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CF/"},{"id":"D3-CM","name":"Content Modification","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CM/"},{"id":"D3-CQ","name":"Content Quarantine","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-CQ/"},{"id":"D3-LFP","name":"Local File Permissions","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-LFP/"},{"id":"D3-NTF","name":"Network Traffic Filtering","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-NTF/"},{"id":"D3-RFAM","name":"Remote File Access Mediation","tactic":"Isolate","url":"https://d3fend.mitre.org/technique/d3f:D3-RFAM/"}]},{"tactic":"Evict","items":[{"id":"D3-FEV","name":"File Eviction","tactic":"Evict","url":"https://d3fend.mitre.org/technique/d3f:D3-FEV/"}]},{"tactic":"Restore","items":[{"id":"D3-RF","name":"Restore File","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RF/"},{"id":"D3-RS","name":"Restore Software","tactic":"Restore","url":"https://d3fend.mitre.org/technique/d3f:D3-RS/"}]},{"tactic":"Deceive","items":[{"id":"D3-DF","name":"Decoy File","tactic":"Deceive","url":"https://d3fend.mitre.org/technique/d3f:D3-DF/"}]},{"tactic":"Model","items":[{"id":"D3-AVE","name":"Asset Vulnerability Enumeration","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-AVE/"},{"id":"D3-SWI","name":"Software Inventory","tactic":"Model","url":"https://d3fend.mitre.org/technique/d3f:D3-SWI/"}]}]},"affected":[{"vendor":"dell","product":"policy_manager_for_secure_connect_gateway","name":"policy manager for secure connect gateway","label":"policy_manager_for_secure_connect_gateway","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.00.16","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.00.16","eol":null},{"vendor":"dell","product":"secure connect gateway (scg) policy manager","name":"Secure Connect Gateway (SCG) Policy Manager","label":"secure connect gateway (scg) policy manager","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"< 5.36.00.16 or later","noFixRecorded":false,"fixedIn":null}],"versionsText":"< 5.36.00.16 or later","eol":null}],"affectedCount":2,"eol":{"hasEol":false,"count":0},"references":[{"url":"https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9","label":"www.dell.com/support/…","hostname":"www.dell.com","tags":["Vendor Advisory","Patch"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2026-09-29T11:39:50.775Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2026-09-30T03:56:00.985Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":70,"level":"high","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-15T22:54:15.741Z","stale":false,"partial":false}}