{"id":"CVE-2026-25193","aliases":["EUVD-2026-31636","GHSA-5p63-2cwc-2x43"],"status":"published","title":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service...","description":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.","severity":{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00136,"percentile":0.03104,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-532"],"published":"2026-05-25T05:28:14Z","modified":"2026-08-17T18:21:14Z","products":[{"vendor":"gallagher","product":"active directory sync"},{"vendor":"gallagher","product":"active_directory_sync"},{"vendor":"gallagher","product":"cardholder sync utility"},{"vendor":"gallagher","product":"cardholder_sync_utility"},{"vendor":"gallagher","product":"command centre server"},{"vendor":"gallagher","product":"command_centre"},{"vendor":"gallagher","product":"diagnostics service"},{"vendor":"gallagher","product":"diagnostics_service"},{"vendor":"gallagher","product":"elevator service"},{"vendor":"gallagher","product":"elevator_service"},{"vendor":"gallagher","product":"encoding kiosk application"},{"vendor":"gallagher","product":"encoding_kiosk_application"},{"vendor":"gallagher","product":"entra id sync"},{"vendor":"gallagher","product":"entra_id_sync_v1"},{"vendor":"gallagher","product":"entra_id_sync_v2"},{"vendor":"gallagher","product":"event logger"},{"vendor":"gallagher","product":"event sync utility"},{"vendor":"gallagher","product":"event_logger"},{"vendor":"gallagher","product":"event_sync_utility"},{"vendor":"gallagher","product":"middleware framework"},{"vendor":"gallagher","product":"middleware_framework"},{"vendor":"gallagher","product":"nexudus integration"},{"vendor":"gallagher","product":"nexudus_integration"},{"vendor":"gallagher","product":"okta sync"},{"vendor":"gallagher","product":"okta_sync"},{"vendor":"gallagher","product":"papercut interface integration"},{"vendor":"gallagher","product":"papercut_interface_integration"},{"vendor":"gallagher","product":"sip integration"},{"vendor":"gallagher","product":"sip_integration"}],"references":[{"url":"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-25193"},{"url":"https://github.com/advisories/GHSA-5p63-2cwc-2x43"}],"sources":{"cve":[{"id":"CVE-2026-25193","description":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.","status":"published","published":"2026-05-25T05:28:14.766Z","modified":"2026-05-26T14:24:08.348Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T13:41:30.911526Z"}],"euvd":[{"id":"EUVD-2026-31636","description":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.","status":"published","published":"2026-05-25T05:28:14Z","modified":"2026-05-26T14:24:08Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T18:21:07.388987Z"}],"ghsa":[{"id":"GHSA-5p63-2cwc-2x43","title":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service...","description":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.","status":"published","published":"2026-05-26T13:30:39Z","modified":"2026-05-26T13:30:46Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","level":"high"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T15:08:16.907279Z"}],"nvd":[{"id":"CVE-2026-25193","description":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.","status":"published","published":"2026-05-25T07:16:14.263Z","modified":"2026-08-17T18:21:14.433Z","cvss":[{"version":"3.1","score":8.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-532"],"updated_at":"2026-11-02T14:12:20.131508Z"}]}}