# CVE-2026-73599: Dell Secure Connect Gateway Policy Manager open redirect

Source: https://junglewise.ai/threats/cve-2026-73599-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-29. Updated: 2026-09-29  
License: CC BY 4.0 with a link back

CVE-2026-73599 · Severity: medium · CVSS 5.4 · Published 2026-09-29

Dell Secure Connect Gateway Policy Manager, a network access control appliance, contains an open redirect vulnerability that allows unauthenticated attackers to redirect users to malicious websites. An attacker could exploit this to redirect users or perform server-side request forgery attacks, potentially compromising user sessions or internal systems.

Technologies: [Dell Secure Connect Gateway Policy Manager](https://junglewise.ai/threats/technologies/secure-connect-gateway-policy-manager). Vendors: [Dell](https://junglewise.ai/threats/vendors/dell).

## Quick answers

**Is CVE-2026-73599 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-73599 being exploited in the wild.

**How severe is CVE-2026-73599?** Medium severity, with a CVSS score of 5.4, published 29 September 2026.

**Which products and versions are affected?** Dell Secure Connect Gateway Policy Manager prior to 5.34.00.16.

**Is there a fix for CVE-2026-73599?** A patch was published on 2026-09-29: Fix available in version 5.34.00.16 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-73599 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-73599?** Check whether you run Dell Secure Connect Gateway Policy Manager at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is an open redirect in URL handling that does not properly validate redirection targets. An unauthenticated attacker with network access can craft a malicious URL that redirects users to untrusted sites or performs SSRF attacks against internal resources. The vulnerability affects versions prior to 5.34.00.16 and is fixed in that version.

## Affected products

- Dell Secure Connect Gateway Policy Manager prior to 5.34.00.16

## Timeline

- 2026-09-29: disclosed
- 2026-09-29: patched: Fix available in version 5.34.00.16

## References

- [https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9](https://www.dell.com/support/kbdoc/en-ca/000503592/dsa-2026-385-security-update-for-dell-secure-connect-gateway-policy-manager-multiple-vulnerabilities?msockid=3021cac2195069ed3194ddad186a68f9)

## Related threats

- [Dell Secure Connect Gateway Policy Manager incorrect authorization](https://junglewise.ai/threats/cve-2026-78341-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager path traversal](https://junglewise.ai/threats/cve-2026-78340-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager incorrect permission assignment](https://junglewise.ai/threats/cve-2026-78339-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager server-side request forgery](https://junglewise.ai/threats/cve-2026-78027-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)
- [Dell Secure Connect Gateway Policy Manager authorization bypass](https://junglewise.ai/threats/cve-2026-78026-dell-secure-connect-gateway-scg-policy-manager-versions-prior-to)