Insufficient Session Expiration Vulnerability in Dell Secure Connect Gateway
CVE-2026-73586

6.4MEDIUM

Key Information:

Vendor

Dell
Status
Secure Connect Gateway (scg) Policy Manager
Vendor
CVE Published:
23 September 2026

What is CVE-2026-73586?

The Dell Secure Connect Gateway (SCG) Policy Manager is impacted by an Insufficient Session Expiration vulnerability that may allow a low privileged attacker with adjacent network access to exploit the system. This can potentially lead to elevation of privileges, bypassing of protection mechanisms, and unauthorized access to sensitive information. It is essential for organizations to ensure their systems are updated to version 5.34.00.16 or later to mitigate this security issue.

Affected Version(s)

Secure Connect Gateway (SCG) Policy Manager 0 < 5.36.00.16 or later

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.