Skip to main content

Gatemanager CVE-2026-1759

| EUVDEUVD-2026-78412 MEDIUM
Improper Handling of Insufficient Permissions or Privileges (CWE-280)
2026-09-15 Secomea GHSA-94rp-r2m9-5m69
Privilege Escalation Gatemanager Secomea
6.5
CVSS 3.1 · Vendor: Secomea
Share

Severity by source

Vendor (Secomea) PRIMARY
6.5 MEDIUM
AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from Vendor (Secomea) · only source for this CVE.

CVSS VectorVendor: Secomea

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
Analysis Generated
Sep 15, 2026 - 11:37 vuln.today

DescriptionCVE.org

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation.

This issue affects GateManager: 11.5;0, 11.4.625515072:0.

Fixed in Version 11.6 or 11.4.626194074 and above

AnalysisAI

Privilege escalation in Secomea GateManager 11.5 and 11.4.625515072 allows an authenticated, low-privileged user (CVSS PR:L) to reach data or functionality that should be reserved for higher-privileged roles, resulting in a high confidentiality impact (C:H/I:N/A:N). Secomea has released fixed builds — 11.6 and 11.4.626194074 or later — and the flaw is rooted in CWE-280, improper handling of insufficient permissions or privileges. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Gatemanager

View all
CVE-2026-1758 HIGH
8.3 Sep 15

Session fixation in the Secomea GateManager webserver module lets an attacker who can plant a known session identifier o
CVE-2022-2752 HIGH
7.8 Dec 09

A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under s
CVE-2022-38123 HIGH
7.2 Dec 06

Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrato
CVE-2025-14716 MEDIUM
6.5 Mar 19

An improper authentication vulnerability in Secomea GateManager's webserver modules allows authenticated users to bypass
CVE-2023-0317 MEDIUM
4.9 Apr 19

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensit
CVE-2022-25786 MEDIUM
4.9 May 04

Unprotected Alternate Channel vulnerability in debug console of GateManager allows system administrator to obtain sensit

Same weakness CWE-280 – Improper Handling of Insufficient Permissions or Privileges

View all
CVE-2024-24116 CRITICAL POC
9.8
CVE-2024-25108 HIGH POC
8.8
CVE-2023-27087 HIGH POC
7.5
CVE-2022-4863 MEDIUM POC
6.5
CVE-2021-38312 MEDIUM POC
6.5
CVE-2025-46066 CRITICAL
9.9
CVE-2024-46988 MEDIUM POC
5.7
CVE-2026-41566 CRITICAL
9.4

Same technique Privilege Escalation

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2025-47812 CRITICAL POC
10.0
CVE-2013-0422 CRITICAL POC
9.8
CVE-2013-0632 CRITICAL POC
9.8
CVE-2024-9474 MEDIUM POC
6.9
CVE-2017-5689 CRITICAL POC
9.8
CVE-2021-20021 CRITICAL POC
9.8
CVE-2017-12635 CRITICAL POC
9.8

Share

CVE-2026-1759 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy