---
id: CVE-2026-73599
title: >-
  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to
  5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect')
  vulnerability
summary: >-
  Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to
  5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect')
  vulnerability. An unauthenticated attacker with remote access could
  potentially exploit this …
severity: medium
cvss: 5.4
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N'
cwe:
  - CWE-601
vendor: dell
product: policy_manager_for_secure_connect_gateway
affected:
  - policy_manager_for_secure_connect_gateway < 5.34.00.16
patched:
  - policy_manager_for_secure_connect_gateway 5.34.00.16
published: '2026-09-29'
updated: '2026-10-06'
sourceUpdated: '2026-10-06T16:32:49.740'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-73599'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9
    label: security_alert@emc.com
tags:
  - nvd
  - cve.org
epss: 0.00146
epssPercentile: 0.03823
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-09-29T13:45:43.396076Z'
ingestedAt: '2026-09-29T12:33:37.302Z'
---

## Overview

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site ('Open Redirect') vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery.

## Affected

- `policy_manager_for_secure_connect_gateway < 5.34.00.16`

## Remediation

Upgrade past the affected range:

- `policy_manager_for_secure_connect_gateway 5.34.00.16`