CVE Catalog

CVE-2026-1758

HighCVSS 8.3
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.24%

16th percentile - higher than 16% of all known CVEs

Summary

A session fixation vulnerability in the Secomea GateManager webserver module allows session fixation. This issue affects GateManager versions 11.5;0 and 11.4.625515072:0. It is fixed in version 11.6 or 11.4.626194074 and above.

Risk Assessment

An attacker can fix a victim's session identifier and hijack their session, gaining unauthorized access to protected resources. This may lead to privilege escalation and system compromise.

Recommendation

Update Secomea GateManager to version 11.6 or 11.4.626194074 or later. Until patched, monitor for unusual session activity and enforce re-authentication.

Other vulnerabilities in Secomea GateManager

Original NVD description (English source)

Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above

Vulnerability data from NVD (NIST) · CISA KEV · EPSS