CVE-2026-73596: dell policy_manager_for_secure_connect_gateway

Vulnerability summary

CVE-2026-73596 is a medium (CVSS 6.5) vulnerability in dell policy_manager_for_secure_connect_gateway. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 8.9% of scored vulnerabilities.

Timeline

1. 29-09-2026
   PublishedVulnerability first disclosed.
2. 30-09-2026
   Last modifiedVulnerability information updated.

Description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.

• CWE-1188Initialization of a Resource with an Insecure DefaultThe product initializes or sets a resource with a default that is intended to be changed by the product's installer, administrator, or maintainer, but the default is not secure.