๐Ÿ” CVE Alert

CVE-2026-73586

MEDIUM 6.4
CVSS Score
6.4
EPSS Score
0.0%
EPSS Percentile
0th

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.

CWE CWE-613
Vendor dell
Product secure connect gateway (scg) policy manager
Published Sep 23, 2026
Stay Ahead of the Next One

Get instant alerts for dell secure connect gateway (scg) policy manager

Be the first to know when new medium vulnerabilities affecting dell secure connect gateway (scg) policy manager are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:A/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:L
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
Low

Affected Versions

Dell / Secure Connect Gateway (SCG) Policy Manager
0 < 5.36.00.16 or later

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
dell.com: https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9