CVE-2026-73587
Received Received - Intake

Improper Certificate Validation in Dell Secure Connect Gateway

Vulnerability report for CVE-2026-73587, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-09-23

Last updated on: 2026-09-23

Assigner: Dell

Description

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, and Protection mechanism bypass.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-23
Last Modified
2026-09-23
Generated
2026-09-23
AI Q&A
2026-09-23
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
dell secure_connect_gateway to 5.34.00.16 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-295 The product does not validate, or incorrectly validates, a certificate.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Dell Secure Connect Gateway (SCG) Policy Manager before version 5.34.00.16 has an Improper Certificate Validation flaw. This allows unauthenticated attackers within adjacent network range to exploit it, potentially causing information disclosure, tampering, and bypassing security protections.

Impact Analysis

An attacker could intercept sensitive data, alter transmitted information, or bypass security controls. This may lead to unauthorized access to confidential data or disruption of services relying on secure connections.

Compliance Impact

This vulnerability could violate compliance requirements for data protection and integrity, such as GDPR (data confidentiality) or HIPAA (secure transmission of health data). Exploitation may result in non-compliance penalties or legal consequences.

Mitigation Strategies

Update Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later to address the improper certificate validation vulnerability.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-73587. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart