Secomea vulnerabilities
We track 8 vulnerabilities in Secomea products across 15 products. 8 are rated high or critical, and none are known to be exploited. The most recent was published on September 15, 2026.
Latest Secomea vulnerabilities
- 8.3 High severity
GateManager: Session Fixation
Session fixation vulnerability in Secomea GateManager (webserver module) allows Session Fixation. This issue affects GateManager: 11.5;0, 11.4.625515072:0. Fixed in Version 11.6 or 11.4.626194074 and above
- 8.2 High severity
GateManager: Buffer Copy without Checking Size of Input
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') vulnerability in Secomea GateManager (webserver modules) allows crash of GateManager.This issue affects GateManager: from 9.7 before 11.2.624095033.
- 8.1 High severity
GateManager: Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG)
Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Secomea GateManager (Webserver modules) allows Session Hijacking.This issue affects GateManager: before 11.2.624071020.
- 8.8 High severity
GateManager: Insufficiently Protected Credentials
Plaintext Storage of a Password vulnerability in Secomea GateManager (USB wizard) allows Authentication abuse on SiteManager, if the generated file is leaked.
- 7.8 High severity
GateManager: Improper Authentication
A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conditions. This issue affects: Secomea GateManager versions from 9.4 through 9.7.
- 7.2 High severity
Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager…
Improper Input Validation of plugin files in Administrator Interface of Secomea GateManager allows a server administrator to inject code into the GateManager interface. This issue affects: Secomea GateManager versions prior to 10.0.
- 7.2 High severity
SiteManager: Out-of-bounds Write
Stack-based Buffer Overflow vulnerability in SiteManager allows logged-in or local user to cause arbitrary code execution. This issue affects: Secomea SiteManager all versions prior to 9.7.
- 8.8 High severity
GateManager: Cross-Site Request Forgery
Cross-Site Request Forgery (CSRF) vulnerability in Web UI of Secomea GateManager allows phishing attacker to issue get request in logged in user session.