CVE-2026-73594 is an improper certificate validation vulnerability in Dell Secure Connect Gateway (SCG) Policy Manager affecting versions prior to 5.34.00.16 and prior to 5.36. The vulnerability allows an unauthenticated attacker with adjacent network access to exploit the certificate validation flaw, potentially leading to information disclosure, information tampering, and bypassing protection mechanisms. The CVSS 3.1 vector indicates the attack requires adjacent network access, high attack complexity, no privileges required, user interaction required, and impacts confidentiality and integrity with high severity but no impact on availability.

Successful exploitation could result in unauthorized disclosure and modification of sensitive information and bypass of security protections within the affected Dell SCG Policy Manager. This could compromise the confidentiality and integrity of data handled by the product. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix links are provided, users should monitor Dell's advisories for updates and apply any official fixes once available. In the meantime, limit adjacent network access to the SCG Policy Manager and apply network segmentation to reduce exposure.