CVE-2026-73589
MediumCVSS 6.3Summary
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 and prior to 5.36 contain a Weak Encoding for Password vulnerability. A low-privileged attacker with local access could exploit it, leading to information disclosure, information tampering, protection mechanism bypass, and unauthorized access.
Risk Assessment
Information disclosure or tampering and bypass of protection mechanisms by a low-privileged local user may occur, creating a risk of unauthorized access to the system.
Recommendation
Update Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or 5.36 (or later). Restrict local access to the system to trusted users.
Other vulnerabilities in Dell Secure Connect Gateway Policy Manager
See all- CVE-2026-73591High
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Inclusion of Sensitive Information in Source Code vulnerability. An unauthenticated attacker with remote access could exploit it, leading to information exposure.
- CVE-2026-73588High
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could exploit it, leading to unauthorized access.
- CVE-2026-73587Medium
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could exploit it, leading to information disclosure, information tampering, and protection mechanism bypass.
- CVE-2026-73586Medium
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Insufficient Session Expiration vulnerability. A low-privileged attacker with adjacent network access could exploit it, leading to elevation of privileges, protection mechanism bypass, and unauthorized access.
- CVE-2026-71178Low
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Use of Non-Canonical URL Paths for Authorization Decisions vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
- CVE-2026-71177Medium
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an Improper Restriction of Rendered UI Layers or Frames vulnerability (clickjacking). A low-privileged attacker with remote access could exploit it, leading to elevation of privileges and session theft.
Original NVD description (English source)
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.