CVE-2026-73597 is a Cross-Site Request Forgery (CSRF) vulnerability affecting Dell Secure Connect Gateway (SCG) Policy Manager versions before 5.34.00.16. An unauthenticated attacker with remote access could exploit this vulnerability to perform unauthorized actions that may result in information disclosure, information tampering, launching phishing attacks, and bypassing protection mechanisms. The CVSS 3.1 base score is 6.5, indicating a medium severity. No vendor advisory or patch information is currently available to confirm remediation status.

Exploitation of this CSRF vulnerability could allow an unauthenticated remote attacker to manipulate the SCG Policy Manager, potentially leading to disclosure and tampering of sensitive information, enabling phishing attacks, and bypassing security protections. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, organizations should consider implementing compensating controls such as validating user actions with anti-CSRF tokens and restricting access to the SCG Policy Manager interface to trusted networks.