Authentication Bypass Vulnerability in Secomea GateManager Webserver
CVE-2025-14716

6.5MEDIUM

Key Information:

Vendor

Secomea

Status
Gatemanager
Vendor
CVE Published:
19 March 2026

What is CVE-2025-14716?

An improper authentication vulnerability in Secomea's GateManager webserver modules can potentially allow unauthorized users to bypass authentication mechanisms, compromising the security of the system. This issue specifically affects GateManager version 11.4;0, enabling malicious actors to exploit the weakness and gain access without proper credentials. Users are strongly advised to review the support documentation from Secomea for guidance on mitigating this vulnerability.

Affected Version(s)

GateManager 11.4;0 < 11.5.625504039

References

https://www.secomea.com/support/cybersecurity-advisory/

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.