# CVE-2026-73595: Dell Secure Connect Gateway Policy Manager code download without integrity check

Source: https://junglewise.ai/threats/cve-2026-73595-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-29. Updated: 2026-09-29  
License: CC BY 4.0 with a link back

CVE-2026-73595 · Severity: medium · CVSS 4.7 · Published 2026-09-29

Dell Secure Connect Gateway Policy Manager is a security appliance that manages remote access policies. Versions before 5.34.00.16 and 5.36 contain a vulnerability allowing unauthenticated attackers to download and execute unsigned code, potentially compromising the gateway and the networks it protects.

Technologies: [Dell Secure Connect Gateway Policy Manager](https://junglewise.ai/threats/technologies/secure-connect-gateway-policy-manager). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-73595 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-73595 being exploited in the wild.

**How severe is CVE-2026-73595?** Medium severity, with a CVSS score of 4.7, published 29 September 2026.

**Which products and versions are affected?** Dell Secure Connect Gateway Policy Manager prior to 5.34.00.16 and prior to 5.36.

**Is there a fix for CVE-2026-73595?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-73595 attacked?** It is attacked over the network.

**Am I affected by CVE-2026-73595?** Check whether you run Dell Secure Connect Gateway Policy Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An unauthenticated remote attacker can exploit a download-of-code-without-integrity-check vulnerability in the Policy Manager, bypassing code signing verification. This allows arbitrary code execution on the affected appliance with potential for data disclosure, tampering, and protection mechanism bypass. A security update is available from Dell.

## Affected products

- Dell Secure Connect Gateway Policy Manager prior to 5.34.00.16 and prior to 5.36

## Timeline

- 2026-09-29: disclosed
- 2026-09-29: advisory: DSA-2026-385 published

## References

- [https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9](https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9)

## Related threats

- [Dell Secure Connect Gateway Policy Manager incorrect authorization](https://junglewise.ai/threats/cve-2026-78341-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager path traversal](https://junglewise.ai/threats/cve-2026-78340-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager incorrect permission assignment](https://junglewise.ai/threats/cve-2026-78339-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager server-side request forgery](https://junglewise.ai/threats/cve-2026-78027-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager authorization bypass](https://junglewise.ai/threats/cve-2026-78026-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)