CVE-2026-73588

Katalog CVE

CVSS 7.4 · High EPSS 0,25%

Kerentanan Missing Authentication for Critical Function pada dell policy manager for secure connect gateway. Skor CVSS 3.1 7.4 (High) menurut emc.com.

Deskripsi (NVD)

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Rincian

Terbit di NVD

23 September 2026

Terakhir diubah

25 September 2026

Status NVD

Analyzed

CVSS 3.1

7.4 (High), sumber emc.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

0,25% peluang dieksploitasi; lebih tinggi dari 14,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gatewa... advisory vendor