Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-73586

Secure Connect Gateway (SCG) Policy Manager · Vulnerability

CVSS 3.1 6.4 MEDIUMCheck source for fixed versionsKEV status unknown

Original advisory

cve-program · CVE-2026-73586

Published

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-73586

Published

Secure Connect Gateway (SCG) Policy Manager

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "Dell",
                    "product": "Secure Connect Gateway (SCG) Policy Manager",
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "5.36.00.16 or later",
                            "versionType": "semver"
                        }
                    ],
                    "defaultStatus": "unaffected"
                }

Original source record · Cite this exact observation · Complete original publisher JSON