External risk intelligence

Dell Secure Connect Gateway Policy Manager Code Download Integrity Check Vulnerability

CVE advisorySeverity: CRITICAL (CVSS 9.8)

CVE-2026-73595

Dell Secure Connect Gateway (SCG) is designed as a centralized management and connectivity gateway for enterprise infrastructure. These appliances are typically deployed to facilitate remote support and communication between internal environments and external vendor services, making them naturally positioned as edge-facing or gateway services within a network.

Information Disclosure

Dell Policy Manager For Secure Connect Gateway

before 5.36.00.16

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

External exposure likelihood

Horizon Alert

Summary of the vulnerability and why it matters

A vulnerability in Dell's Secure Connect Gateway Policy Manager could allow unauthenticated remote attackers to execute code, modify information, bypass security measures, or disclose sensitive data. The primary concern is to confirm if your organization uses this specific Dell technology, as its nature as a gateway service makes it potentially accessible from external networks.

Unchecked downloads allow remote code execution.
This gateway connects your systems to external services.
Verify if this Dell software is in use.

Attack Path

How an attacker could exploit the issue

An attacker with remote access could exploit this vulnerability by targeting the Dell Secure Connect Gateway Policy Manager. This could allow for code execution, information disclosure, tampering, and bypassing security measures.

No authentication required for access.
Attacker triggers vulnerability remotely.
Results in code execution and data compromise.

Live Threat

Current exploitation, exposure, and threat context

This vulnerability could allow an unauthenticated attacker with remote access to execute arbitrary code on the affected system. This could lead to unauthorized access, modification, or deletion of data, as well as disruption of the system's normal operations.

System code and configuration data.
Remote code execution via network.
Compromise of system integrity and confidentiality.

Operational Fix

Recommended remediation, mitigation, and detection steps

Ownership of Dell Secure Connect Gateway Policy Manager falls to infrastructure or platform teams responsible for managing the gateway appliance, with oversight from security and vendor management. The first actionable step is to locate all instances of the affected technology, determine their business criticality and external reachability, and then confirm the accountable owner for remediation planning.

Infrastructure or platform teams own remediation.
Verify external reachability and business impact.
Plan updates during scheduled maintenance windows.

Supplementary metadata

CVSS vector

Validate whether this threat affects your internet-facing exposure.

Halo Threat Intelligence helps prioritize remediation with Halo Surface Signal and H/A/L/O context. Start exposure validation with a free external attack surface trial.

Free EASM Trial See How Signal Works

Frequently asked questions

What is Dell Secure Connect Gateway Policy Manager?

It is a centralized software component used within enterprise environments to manage connectivity and remote support. It acts as a gateway, facilitating communication between your internal infrastructure and Dell's support services. By handling these secure connections, it plays a critical role in maintaining system health and enabling vendor-assisted troubleshooting for your hardware.

What does CWE-494 mean for CVE-2026-73595?

This vulnerability is classified as 'Download of Code Without Integrity Check.' In simple terms, the software fails to verify that a file or update is authentic and untampered with before it runs it. Because CVE-2026-73595 allows this process to happen, an attacker can trick the system into downloading and executing malicious code, which bypasses the software's normal security defenses.

How can an attacker trigger this vulnerability?

An attacker with network access can trigger this by sending requests that the Policy Manager processes without authentication. It is important to note that this is not triggered by standard, legitimate user interactions; it requires an active, remote attempt to supply unverified code to the gateway. If the gateway is not reachable over the network, or if the connection is restricted to trusted, internal-only traffic, the path for this specific exploit is significantly hindered.

Why is this CVE particularly relevant to my network?

According to Halo Surface Signal, this software is designed to bridge internal systems and external services, meaning it is often positioned at the edge of your network. Because it acts as a gateway for communication, it is more likely to be accessible to remote, internet-based traffic. This high level of connectivity increases the necessity to prioritize understanding where this software sits within your specific environment.

What should I do first if I run this software?

Your first step is to perform an inventory of your environment to identify every instance of the Dell Secure Connect Gateway Policy Manager. Once you have a list, work with your infrastructure teams to verify if those instances are reachable from external networks. After determining the business criticality of each identified appliance, coordinate with your team to plan for the necessary version updates to resolve the security gap.

References

www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-u…

Written by Nicholas Merritt

Nicholas Merritt is VP of Security Solutions at Halo Security. With more than 25 years across application security, vulnerability prioritization, and offensive security, he helps teams translate threat data into practical exposure validation and remediation focus. He authors Halo Threat Intelligence CVE advisories using Halo Surface Signal and H/A/L/O context to prioritize internet-facing risk.