CVE-2026-1758

Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above

Scoring

Severity

HIGH

CVSS base score

8.3

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L

EPSS probability

0.24%

CWE

CWE-384

Published

2026-09-15

Last modified

2026-09-15

Affected products

• Secomea GateManager

Weakness type

• CWE-384

Related vulnerabilities

• CVE-2024-11317 — PHP Session Fixation
• CVE-2024-38513 — Fiber Session Middleware Token Injection Vulnerability
• CVE-2025-59841 — FlagForgeCTF's Improper Session Handling Allows Access After Logout
• CVE-2025-52689 — Weak Session ID Check in the OmniAccess Stellar Web Management Interface
• CVE-2024-13967 — ession-Management Failure
• CVE-2024-45368 — AutomationDirect DirectLogic H2-DM1E Session Fixation
• CVE-2022-30605 — A privilege escalation vulnerability exists in the session id functionality of WWBN AVideo 11.6 and dev master commit 3f
• CVE-2020-25198 — MOXA NPort IAW5000A-I/O Series

Markdown version · Browse all CVEs