Dell SCG Policy Manager <5.34 Insecure Init Allows Elevation
CVE-2026-73596 Published on September 29, 2026

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Initialization of a Resource with an Insecure Default vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Elevation of privileges, Information tampering, Protection mechanism bypass, and Unauthorized access.

Vendor Advisory NVD

Vulnerability Analysis

CVE-2026-73596 is exploitable with network access, and requires user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality and integrity, and no impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
LOW
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
LOW
Integrity Impact:
LOW
Availability Impact:
NONE

Weakness Type

Insecure Default Initialization of Resource

The software initializes or sets a resource with a default that is intended to be changed by the administrator, but the default is not secure.


Products Associated with CVE-2026-73596

Want to know whenever a new CVE is published for Dell Secure Connect Gateway? stack.watch will email you.

Dell Secure Connect Gateway
 

Affected Versions

Dell Secure Connect Gateway (SCG) Policy Manager: