Gallagher Command Centre vulnerabilities

• gallagher command centre server, command centre +1 more An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an... CVE-2026-26053 5.3 MediumJuly 7, 2026
• gallagher command centre, active directory sync, cardholder sync utility +14 more +16 more Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service... CVE-2026-25193 8.1 HighMay 25, 2026
• gallagher command centre server, command centre +1 more Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged... CVE-2026-20757 2.5 LowMarch 3, 2026
• gallagher command centre mobile client, command centre mobile +1 more Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on... CVE-2025-47147 5.7 MediumMarch 3, 2026
• gallagher command centre server Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged... CVE-2025-48430 5.5 MediumOctober 23, 2025
• gallagher command centre server Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could... CVE-2025-48428 6.7 MediumOctober 23, 2025
• gallagher command centre server Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the... CVE-2025-47699 9.9 CriticalOctober 23, 2025
• gallagher command centre server Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a... CVE-2025-41402 5.5 MediumOctober 23, 2025
• gallagher command centre server Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre... CVE-2025-35981 5.5 MediumOctober 23, 2025
• gallagher command centre server A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a... CVE-2025-46406 5.6 MediumJuly 10, 2025
• gallagher command centre server Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration... CVE-2024-41724 8.7 HighMarch 10, 2025
• gallagher command centre server Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm... CVE-2024-42407 8.5 HighDecember 12, 2024
• gallagher command centre server, command centre +1 more Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server... CVE-2024-43690 8.0 HighSeptember 11, 2024
• gallagher command centre Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint... CVE-2024-23194 3.3 LowJuly 11, 2024
• gallagher command centre server, command centre +1 more Improper neutralization of special elements in output (CWE-74) used by the email generation... CVE-2024-21838 6.8 MediumMarch 5, 2024
• gallagher command centre server, command centre +1 more Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command... CVE-2024-21815 9.1 CriticalMarch 5, 2024
• gallagher command centre diagnostics service, command centre +1 more A reliance on untrusted inputs in a security decision could be exploited by a privileged user to... CVE-2023-46686 5.5 MediumDecember 18, 2023
• gallagher command centre, command centre server +1 more An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an... CVE-2023-23584 4.3 MediumDecember 18, 2023
• gallagher command centre server, command centre +1 more Incorrect behavior order in the Command Centre Server could allow privileged users to gain... CVE-2023-23576 4.3 MediumDecember 18, 2023
• gallagher command centre Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed... CVE-2023-23570 5.4 MediumDecember 18, 2023
• gallagher command centre Improper privilege validation in Command Centre Server allows authenticated unprivileged... CVE-2023-23568 4.3 MediumJuly 25, 2023
• gallagher command centre Access Zone stack overflow CVE-2023-22363 6.5 MediumJuly 24, 2023
• gallagher command centre Competency access levels not enforced in the server CVE-2023-25074 7.1 HighJuly 24, 2023
• gallagher command centre Improper privilege validation in Command Centre Server allows authenticated operators to modify... CVE-2023-22428 7.6 HighJuly 24, 2023
• gallagher command centre Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date... CVE-2022-26348 8.2 HighJuly 6, 2022
• gallagher command centre Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server... CVE-2021-23193 8.1 HighNovember 18, 2021
• gallagher command centre Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged... CVE-2021-23197 5.2 MediumNovember 18, 2021
• gallagher command centre Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to... CVE-2021-23167 8.1 HighNovember 18, 2021
• gallagher command centre mobile connect for android, command centre mobile connect +1 more Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle... CVE-2021-23162 7.7 HighNovember 18, 2021
• gallagher command centre mobile client for android, command centre mobile client +1 more Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle... CVE-2021-23155 9.0 CriticalNovember 18, 2021
• gallagher command centre A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote... CVE-2021-23230 9.9 CriticalJune 11, 2021
• gallagher command centre Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre... CVE-2021-23211 6.0 MediumJune 11, 2021
• gallagher command centre Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator... CVE-2021-23205 8.1 HighJune 11, 2021
• gallagher command centre Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command... CVE-2021-23204 8.1 HighJune 11, 2021
• gallagher command centre Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre... CVE-2021-23182 6.0 MediumJune 11, 2021
• gallagher command centre Improper Authorization vulnerability in Gallagher Command Centre Server allows command line... CVE-2021-23140 9.9 CriticalJune 11, 2021
• gallagher command centre Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to... CVE-2021-23136 6.5 MediumJune 11, 2021
• gallagher command centre Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or... CVE-2020-16103 8.8 HighDecember 14, 2020
• gallagher command centre Improper Authentication vulnerability in Gallagher Command Centre Server allows an... CVE-2020-16102 7.1 HighDecember 14, 2020
• gallagher command centre SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a... CVE-2020-16104 8.2 HighDecember 14, 2020
• gallagher command centre It is possible for an unauthenticated remote DCOM websocket connection to crash the Command... CVE-2020-16101 7.5 HighSeptember 15, 2020
• gallagher command centre In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5),... CVE-2020-16096 9.9 CriticalSeptember 15, 2020
• gallagher command centre It is possible to enumerate access card credentials via an unauthenticated network connection to... CVE-2020-16098 9.8 CriticalSeptember 15, 2020
• gallagher command centre It is possible for an unauthenticated remote DCOM websocket connection to crash the Command... CVE-2020-16100 7.5 HighSeptember 15, 2020
• gallagher command centre On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)... CVE-2020-16097 7.3 HighSeptember 15, 2020
• gallagher command centre In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour... CVE-2020-16099 4.3 MediumSeptember 15, 2020