CVE-2026-73589 is a vulnerability in Dell Secure Connect Gateway
Published on September 23, 2026
Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Weak Encoding for Password vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism bypass, and Unauthorized access.
Vulnerability Analysis
CVE-2026-73589 can be exploited with local system access, and requires small amount of user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality and integrity, and no impact on availability.
Weakness Type
Weak Encoding for Password
Obscuring a password with a trivial encoding does not protect the password. Password management issues occur when a password is stored in plaintext in an application's properties or configuration file. A programmer can attempt to remedy the password management problem by obscuring the password with an encoding function, such as base 64 encoding, but this effort does not adequately protect the password.
Products Associated with CVE-2026-73589
Want to know whenever a new CVE is published for Dell Secure Connect Gateway? stack.watch will email you.
Affected Versions
Dell Secure Connect Gateway (SCG) Policy Manager:- Before 5.36.00.16 or later is affected.