CYBER CODE RED

Get real-time updates on Telegram

P4Verified

CVE-2026-73595: policy manager for secure connect gateway before 5.36.00.16 (exclusive); +1 more affected products

CVE-2026-73595. CVSS 3.1 base score 9.8 (CRITICAL, NVD). EPSS 0.00106 (percentile 0.01045), scored 14-Oct-2026.

Affected technology

policy manager for secure connect gateway · before 5.36.00.16 (exclusive)
dell

Secure Connect Gateway (SCG) Policy Manager · 0 to before 5.36.00.16 or later
Dell

Description’s affected range: versions prior to 5.34.00.16, Versions prior to 5.36,

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · No privileges required · User interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · No privileges required · No user interaction required

What an attacker can do

An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution, Information disclosure, Information tampering, and Protection mechanism bypass. Vendor/CNA’s CVSS 3.1 assessment (base score 4.7/10) rates confidentiality and integrity impact as low; availability impact as none. NVD’s CVSS 3.1 assessment (base score 9.8/10) rates confidentiality, integrity and availability impact as high.

Published

CWE
CWE-494
CCR priority
39.2 /100 (P4)
CVSS 3.1
9.8 /10 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · NVD
EPSS
0.00106 · percentile 0.01045 · 2026-10-14
KEV
no

Provenance

Stable permalink: https://cybercodered.org/item/cve-cve-2026-73595.html