CVE-2026-1759

MediumCVSS 6.5/10Last modified Sep 18, 2026

Description

Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager allows Privilege Escalation.

This issue affects GateManager: 11.5;0, 11.4.625515072:0.

Fixed in Version 11.6 or 11.4.626194074 and above

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-280

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

No affected versions have been published.

Timeline

Published
Sep 15, 2026
Last modified
Sep 18, 2026
NVD status
Awaiting Analysis

Related CVEs from 2026

CVE-2026-175913.6A flaw was found in libarchive. An attacker can cause a Denial of Service (DoS) or potential information disclosure due to a use-after-free CVE-2026-175937.2An account holding the nexus:settings:update permission in Nexus Repository 3 (or the equivalent nexus:settings permission in the legacy NexCVE-2026-175944.9Nexus Repository 3 CE/Pro versions 3.0.0 through 3.94.x contain an incorrect authorization vulnerability (CWE-863) in the repository-creatioCVE-2026-175952.7Nexus Repository 3 did not fully sandbox JEXL expressions used in Content Selectors. An account holding the nexus:selectors:create permissioCVE-2026-175966.1Nexus Repository 3 was found to be vulnerable to stored cross-site scripting (XSS). A user with the nexus:blobstores:create or nexus:blobstoCVE-2026-175972.7Nexus Repository 3 contains a Server-Side Request Forgery (SSRF) vulnerability in the email configuration verification feature. A user holdiCVE-2026-175984.9Sonatype Nexus Repository 3 did not properly filter internal configuration keys from user-supplied task properties when creating or updatingCVE-2026-175997.2Nexus Repository 3 contained an endpoint used to change the administrator account password during initial onboarding. This endpoint did not CVE-2026-17605.3A flaw was found in SoupServer. This HTTP request smuggling vulnerability occurs because SoupServer improperly handles requests that combineCVE-2026-176008.8Sonatype Nexus Repository 3 did not immediately terminate a user's active login session or revoke their cached permissions when that user's CVE-2026-176017.2A user holding a permission to update privilege definitions could modify a wildcard privilege already assigned to their own role to grant brCVE-2026-176024.9The SSL Zen — SSL Certificate Installer & HTTPS Redirects plugin for WordPress is vulnerable to Directory Traversal in all versions up to, a
CVE-2026-1759: Medium severity, CVSS 6.5 | Vulnix