PT-2026-102510

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An improper certificate validation issue exists where an unauthenticated attacker with adjacent network access can exploit the flaw. This may result in protectio...

PT-2026-102770

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description An issue exists in the nx secure x509 asn1 tlv block parse function, which is used to parse ASN.1 TLV tag-length-value blocks from DER-encoded data during X.509 certificate parsing in TLS...

PT-2026-102732

Fluent Bit is a fast and lightweight logs, metrics, and traces processor for Linux, BSD, macOS, and Windows. From 0.11.0 until 5.0.8, plugins/out forward/forward.c secure forward pong copies the server-controlled PONG2 reason into the 32-byte stack buffer msg with memcpy without checking its...

PT-2026-102794

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description Two client-side TLS/DTLS handshake parsers contain bounded out-of-bounds reads. This occurs when the parsers read fields from a server-supplied message before validating if the message is...

PT-2026-102527

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

PT-2026-102757

Name of the Vulnerable Software and Affected Versions Arm TrustZone-M affected versions not specified Description Improper validation of non-secure NS pointers in multiple non-secure callable NSC entry functions allows an attacker in the non-secure world to provide pointers to secure memory. The...

CVE-2026-73595: Download of Code Without Integrity Check

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains a Download of Code Without Integrity Check vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Code execution,...

CVE-2026-76114: Cleartext Transmission of Sensitive Information

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73593: Active Debug Code

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

PT-2026-102525

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An incorrect permission assignment for critical resources allows a low privileged attacker with local access to elevate their privileges. Recommendations...

PT-2026-102526

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

PT-2026-102772

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description When built with NX SECURE KEY CLEAR, the software wipes every TLS record sent on an active session after it is handed to TCP. Because the TCP layer may have already released the packet...

PT-2026-102771

Name of the Vulnerable Software and Affected Versions NetX Secure TLS affected versions not specified Description NetX Secure TLS accepts empty application-data records without verifying the message authentication code MAC. Within the nx secure verify mac function, a decrypted application record...

PT-2026-102509

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an Active Debug Code vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information disclosure, Information tampering, Protection mechanism...

CVE-2026-73594: Improper Certificate Validation

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, Versions prior to 5.36, contains an Improper Certificate Validation vulnerability. An unauthenticated attacker with adjacent network access could potentially exploit this vulnerability, leading to Information disclosure...

CVE-2026-73599: URL Redirection to Untrusted Site

Dell Secure Connect Gateway SCG Policy Manager, versions prior to 5.34.00.16, contains an URL Redirection to Untrusted Site 'Open Redirect' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Server-side request forgery...

PT-2026-102511

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.36 Description An unauthenticated attacker with remote access can exploit a Download of Code Without Integrity Check issue. This flaw allows the system to download code without...

PT-2026-102766

Name of the Vulnerable Software and Affected Versions NetX Secure affected versions not specified Description The software generates predictable cookies during the DTLS HelloVerifyRequest process. This predictability can be exploited to bypass the cookie-based mechanism intended to prevent Denial...

PT-2026-102524

Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description A Cross-Site Request Forgery CSRF issue exists where an unauthenticated attacker with remote access could potentially exploit the flaw. This could lead to...

CVE-2026-102760: Use After Free

When NetX Secure is built with NXSECUREKEYCLEAR, every TLS record sent on an active session is wiped after it has been handed to TCP. By then the TCP layer owns the packet chain and may already have released it to the packet pool. The wipe therefore writes zeros into packets that are free or in u...