Secomea vulnerabilities
48 CVEs and advisories name Secomea as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-1759Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation.
- CVE-2026-1758Session Fixation
- CVE-2025-14716Unauthorized access to information
- CVE-2021-32007Missing security header: Referrer-Policy URL
- CVE-2024-1969Heap buffer overflow
- CVE-2024-1579Insufficient seeding of random number generator
- CVE-2023-3675Insufficient input validation when downloading certain file types.
- CVE-2023-2912SiteManager Embedded service disruption
- CVE-2022-38125FTP Agent forwards traffic on inactive ports to LinkManager
- CVE-2023-0317GateManager debug interface is included in non-debug builds
- CVE-2022-4308Clear-text passwords in configuration files
- CVE-2022-38124Unwanted debug tool
- CVE-2022-2752Potential vulnerabilities in GM login process
- CVE-2022-38123Insufficient validation of plugin files
- CVE-2022-25786GateManager debug interface is included in production builds
- CVE-2022-25787GTA URLs issued by LMM WEB API may leak information
- CVE-2022-25785Buffer overrun
- CVE-2022-25784User controllable HTML element attribute (potential XSS)
- CVE-2022-25783Hacking attempts from logged-in users are not properly logged by GM
- CVE-2022-25782Insufficient privilege checks on object access and updates.
- CVE-2022-25781Reflected XSS issues in GateManager
- CVE-2022-25780Information leak via device availability query function
- CVE-2022-25779Insufficient scope checks allows adding unrelated audit log entries
- CVE-2022-25778Unload handlers may unintentionally defeat CSRF guards
- CVE-2021-32010Clients may connect to a GateManager with TLS 1.0
- CVE-2021-32009Missing XSS guards on firmware page
- CVE-2021-32005SiteManager Log View XSS Issue
- CVE-2021-32006GateManager information leak for LinkManager Users
- CVE-2021-32008Logged-in Administrator may get unrestricted file system access
- CVE-2021-32004GateManager does not enforce strict hostname matching for WEB server