Gallagher vulnerabilities

Products

• Command Centre 43
• Command Centre 26
• Command Centre Server 16
• Controller 6000 And Controller 7000 7
• Controller 6000 Firmware 6
• Controller 6000 3
• Controller 7000 3
• Controller 7000 Firmware 2

Newest

• gallagher command centre, controller 7000 and 6000 +1 more Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface... CVE-2026-27844 2.7 LowJuly 7, 2026
• gallagher command centre, t-20 readers +1 more Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator... CVE-2026-27790 2.7 LowJuly 7, 2026
• gallagher command centre server, command centre +1 more An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an... CVE-2026-26053 5.3 MediumJuly 7, 2026
• gallagher command centre, active directory sync, cardholder sync utility +14 more +16 more Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service... CVE-2026-25193 8.1 HighMay 25, 2026
• gallagher hanwha vms integration, nx witness vms integration, nxwitness vms and hanwha vms integrations +2 more Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher... CVE-2026-20801 5.6 MediumMarch 3, 2026
• gallagher command centre server, command centre +1 more Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged... CVE-2026-20757 2.5 LowMarch 3, 2026
• gallagher command centre mobile client, command centre mobile +1 more Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on... CVE-2025-47147 5.7 MediumMarch 3, 2026
• gallagher t21 reader Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an... CVE-2025-64734 2.4 LowNovember 18, 2025
• gallagher high sec end of line module Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High... CVE-2025-52578 5.7 MediumNovember 18, 2025
• gallagher hbus devices Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical... CVE-2025-52457 5.7 MediumNovember 18, 2025
• gallagher command centre server Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged... CVE-2025-48430 5.5 MediumOctober 23, 2025
• gallagher command centre server Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could... CVE-2025-48428 6.7 MediumOctober 23, 2025
• gallagher command centre server Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the... CVE-2025-47699 9.9 CriticalOctober 23, 2025
• gallagher command centre server Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a... CVE-2025-41402 5.5 MediumOctober 23, 2025
• gallagher command centre server Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre... CVE-2025-35981 5.5 MediumOctober 23, 2025
• gallagher command centre server A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a... CVE-2025-46406 5.6 MediumJuly 10, 2025
• gallagher t-series readers Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader... CVE-2025-44003 4.3 MediumJuly 10, 2025
• gallagher controller 7000 Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could... CVE-2025-35983 6.5 MediumJuly 10, 2025
• gallagher command centre server Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration... CVE-2024-41724 8.7 HighMarch 10, 2025
• gallagher milestone integration plugin Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP)... CVE-2024-43107 7.2 HighMarch 10, 2025
• gallagher command centre server Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm... CVE-2024-42407 8.5 HighDecember 12, 2024
• gallagher controller 6000 and controller 7000 Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and... CVE-2024-41146 4.6 MediumDecember 12, 2024
• gallagher command centre server, command centre +1 more Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server... CVE-2024-43690 8.0 HighSeptember 11, 2024
• gallagher controller 6000 and controller 7000 Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP... CVE-2024-39808 4.6 MediumSeptember 11, 2024
• gallagher controller 6000 and controller 7000 Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000... CVE-2024-24972 6.5 MediumSeptember 11, 2024
• gallagher controller 6000 and controller 7000 Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and... CVE-2024-23906 6.1 MediumSeptember 11, 2024
• gallagher controller 6000 and controller 7000, controller 6000 firmware, controller 7000 firmware +2 more External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows... CVE-2024-23317 6.3 MediumJuly 11, 2024
• gallagher command centre Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint... CVE-2024-23194 3.3 LowJuly 11, 2024
• gallagher controller 6000 and controller 7000 External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000... CVE-2024-22387 6.8 MediumJuly 11, 2024
• gallagher controller 6000 and controller 7000 Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore... CVE-2024-23485 4.6 MediumJuly 11, 2024
• gallagher controller 7000 Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted... CVE-2024-22383 6.2 MediumMarch 5, 2024
• gallagher command centre server, command centre +1 more Improper neutralization of special elements in output (CWE-74) used by the email generation... CVE-2024-21838 6.8 MediumMarch 5, 2024
• gallagher command centre server, command centre +1 more Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command... CVE-2024-21815 9.1 CriticalMarch 5, 2024
• gallagher command centre diagnostics service, command centre +1 more A reliance on untrusted inputs in a security decision could be exploited by a privileged user to... CVE-2023-46686 5.5 MediumDecember 18, 2023
• gallagher controller 6000, controller 6000 firmware +1 more Sensitive information uncleared after debug/power state transition in the Controller 6000 could... CVE-2023-41967 2.4 LowDecember 18, 2023
• gallagher controller 6000, controller 6000 firmware +1 more A format string issue in the Controller 6000's optional diagnostic web interface can be used... CVE-2023-24590 7.5 HighDecember 18, 2023
• gallagher command centre, command centre server +1 more An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an... CVE-2023-23584 4.3 MediumDecember 18, 2023
• gallagher command centre server, command centre +1 more Incorrect behavior order in the Command Centre Server could allow privileged users to gain... CVE-2023-23576 4.3 MediumDecember 18, 2023
• gallagher command centre Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed... CVE-2023-23570 5.4 MediumDecember 18, 2023
• gallagher command centre, controller 6000/ controller 7000, controller 6000 firmware +2 more Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000... CVE-2023-22439 3.1 LowDecember 18, 2023
• gallagher controller 7000, controller 7000 firmware +1 more Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass... CVE-2023-6355 6.8 MediumDecember 18, 2023
• gallagher command centre Improper privilege validation in Command Centre Server allows authenticated unprivileged... CVE-2023-23568 4.3 MediumJuly 25, 2023
• gallagher command centre Access Zone stack overflow CVE-2023-22363 6.5 MediumJuly 24, 2023
• gallagher command centre Competency access levels not enforced in the server CVE-2023-25074 7.1 HighJuly 24, 2023
• gallagher command centre Improper privilege validation in Command Centre Server allows authenticated operators to modify... CVE-2023-22428 7.6 HighJuly 24, 2023
• gallagher controller 6000, controller 6000 firmware +1 more Controller 6000 buffer overflow via upload feature in web interface CVE-2023-24584 7.5 HighJune 1, 2023
• gallagher command centre Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date... CVE-2022-26348 8.2 HighJuly 6, 2022
• gallagher controller 6000, controller 6000 firmware +1 more Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets... CVE-2022-26078 7.5 HighJuly 6, 2022
• gallagher command centre Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server... CVE-2021-23193 8.1 HighNovember 18, 2021
• gallagher command centre Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged... CVE-2021-23197 5.2 MediumNovember 18, 2021
• Show olderLoading…