CVE-2026-73595

Dell Policy Manager For Secure Connect Gateway: remote code execution

Risk score: 64/100
CVSS: 9.8 v3.1
Exploit chance (30 days): 0.1%
Published: 29 Sep 2026

Open in the live forecast Today's forecast

What to know

What it is: Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Info…
Affected: Dell Policy Manager For Secure Connect Gateway before 5.34.00.16, 5.36
Fix: Upgrade Dell Policy Manager For Secure Connect Gateway to 5.34.00.16 or 5.36 (whichever matches your release line), or later.
Exploitation: No known exploitation

Story map

Story map: the flaws, the fix, how it unfolded and what it connects to. Boxes link to the record or article.

At a glance

Dell Policy Manager For Secure Connect Gateway: Amber, patch this week. Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Restriction of Excessive Authentication Attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Protection mechanism bypa…

The flaws

CVE-2026-73595: Remote code execution (CVSS 9.8 · EPSS 0%)
CVE-2026-76779: Privilege escalation (CVSS 9.8 · EPSS 0%)
CVE-2026-78020: Denial of service (CVSS 8.8 · EPSS 0%)
CVE-2026-78019: Privilege escalation (CVSS 8.8 · EPSS 0%)

The fix

Upgrade Dell Policy Manager For Secure Connect Gateway: 5.34.00.16 · 5.36 or later on your release line

Who is exposed: Dell Policy Manager For Secure Connect Gateway before 5.34.00.16

Where it stands

No known exploitation

Connects to

Same weakness: CWE-494 (CWE-494). 11 other warnings in 30 days
Same product: Earlier Dell Policy Manager For Secure Connect Gateway warnings. 23 in the last 90 days

Why it is Amber

CVSS 9.8 critical
Remotely exploitable without logging in

References

https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9

Original description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass.

Last activity 29 Sep 2026. Patch Forecast updates every hour.