CVE-2026-73591: Dell SCG Policy Manager Information Leak

CVE-2026-73591 Overview

CVE-2026-73591 is an information exposure vulnerability in Dell Secure Connect Gateway (SCG) Policy Manager. The flaw stems from the Inclusion of Sensitive Information in Source Code [CWE-540]. Versions prior to 5.34.00.16 are affected. An unauthenticated remote attacker can exploit this weakness to access sensitive information embedded in accessible source code artifacts. Dell published the fix in advisory DSA-2026-385.

Critical Impact
An unauthenticated remote attacker can retrieve sensitive information from SCG Policy Manager source code, exposing configuration or credential material that supports follow-on attacks.

Affected Products

Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16

Discovery Timeline

2026-09-23 - CVE-2026-73591 published to NVD
2026-09-23 - Last updated in NVD database

Technical Details for CVE-2026-73591

Vulnerability Analysis

Dell Secure Connect Gateway Policy Manager ships source code artifacts that contain sensitive information. An unauthenticated attacker with network access to the Policy Manager interface can request these artifacts and extract embedded secrets. The exposure does not require credentials or user interaction.

The information disclosed can include configuration data, tokens, or other operational secrets stored inline in source. Attackers commonly use such data to pivot into authenticated portions of the platform or into connected Dell service infrastructure. The vulnerability affects confidentiality only; integrity and availability remain intact.

Root Cause

The root cause is a coding practice classified as [CWE-540]: Inclusion of Sensitive Information in Source Code. Developers embedded sensitive values directly in files that remain reachable through the product's network-facing interface. When those files are served, their content becomes accessible to any remote requester.

Attack Vector

Exploitation occurs over the network against the SCG Policy Manager service. An attacker sends unauthenticated HTTP requests to retrieve the exposed source artifacts and parses the responses for sensitive strings. No privileges, user interaction, or local access are required. Dell has not published proof-of-concept code, and no public exploit is currently listed for this CVE.

Refer to the Dell Security Update Advisory for vendor technical details.

Detection Methods for CVE-2026-73591

Indicators of Compromise

Unauthenticated HTTP or HTTPS requests to SCG Policy Manager endpoints that return source or configuration files.
Access log entries from external or unexpected internal IP addresses targeting static resource paths on the Policy Manager.
Reuse of credentials or tokens sourced from SCG Policy Manager in unrelated authentication events.

Detection Strategies

Inspect Policy Manager web server logs for anomalous requests to source, script, or configuration file paths.
Correlate unauthenticated request bursts against SCG Policy Manager with subsequent authentication attempts using service credentials.
Compare deployed Policy Manager binaries and files against the vendor manifest for 5.34.00.16 to confirm patch state.

Monitoring Recommendations

Forward SCG Policy Manager access logs to a centralized analytics platform for retention and query.
Alert on any HTTP 200 response returning source-code content types from Policy Manager endpoints.
Monitor egress from the Policy Manager host for connections to unfamiliar destinations following suspicious inbound activity.

How to Mitigate CVE-2026-73591

Immediate Actions Required

Upgrade Dell Secure Connect Gateway Policy Manager to version 5.34.00.16 or later.
Restrict network access to the SCG Policy Manager interface to trusted management networks only.
Rotate any credentials, API tokens, or secrets that were configured in Policy Manager prior to patching.

Patch Information

Dell addressed CVE-2026-73591 in Secure Connect Gateway Policy Manager version 5.34.00.16. Administrators should apply the update as described in the Dell Security Update Advisory DSA-2026-385, which covers multiple vulnerabilities in the same release.

Workarounds

Place the Policy Manager behind a network access control layer that blocks unauthenticated external requests.
Enforce firewall rules limiting inbound traffic to the Policy Manager to specific administrator source addresses.
Audit and remove any sensitive values reused elsewhere in the environment until patching is complete.

bash

# Example: restrict inbound access to SCG Policy Manager to a management subnet
iptables -A INPUT -p tcp --dport 443 -s 10.10.20.0/24 -j ACCEPT
iptables -A INPUT -p tcp --dport 443 -j DROP