Improper Certificate Validation in Dell Secure Connect Gateway by Dell
CVE-2026-73594

6.4MEDIUM

Key Information:

Vendor

Dell
Status
Secure Connect Gateway (scg) Policy Manager
Vendor
CVE Published:
29 September 2026

What is CVE-2026-73594?

The Dell Secure Connect Gateway Policy Manager is vulnerable due to improper certificate validation, which affects versions prior to 5.34.00.16 and 5.36. An unauthenticated attacker with access to the adjacent network may exploit this flaw, potentially leading to information disclosure, information tampering, and bypass of protection mechanisms. This vulnerability exposes systems to significant risks and requires prompt attention to ensure security and integrity.

Affected Version(s)

Secure Connect Gateway (SCG) Policy Manager 0 < 5.36.00.16 or later

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-20...
vendor-advisory

CVSS V3.1

Score:
6.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.