CVE-2026-73586: Medium severity Dell Secure Connect Gateway (SCG) Policy Manager vulnerability
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Insufficient Session Expiration vulnerability. A low privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypass, and Unauthorized access.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell Secure Connect Gateway (SCG) Policy Managerto a version that resolves this vulnerability.Fixed in 5.34.00.16
Event History
Frequently Asked Questions
Which deployments are affected?
Dell Secure Connect Gateway (SCG) Policy Manager versions earlier than 5.34.00.16 are affected.
What access and conditions does an attacker need?
An attacker needs low-privileged access, adjacent network access, and user interaction. Exploitation is rated as high complexity.
What could successful exploitation allow?
Successful exploitation could lead to elevation of privileges, protection-mechanism bypass, and unauthorized access. The vulnerability has high confidentiality and integrity impact and low availability impact.