Gallagher Command Centre vulnerabilities

• gallagher command centre, controller 7000 and 6000 +1 more Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface... CVE-2026-27844 2.7 LowJuly 7, 2026
• gallagher command centre, t-20 readers +1 more Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator... CVE-2026-27790 2.7 LowJuly 7, 2026
• gallagher command centre server, command centre +1 more An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an... CVE-2026-26053 5.3 MediumJuly 7, 2026
• gallagher command centre, active directory sync, cardholder sync utility +14 more +16 more Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service... CVE-2026-25193 8.1 HighMay 25, 2026
• gallagher command centre server, command centre +1 more Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged... CVE-2026-20757 2.5 LowMarch 3, 2026
• gallagher command centre mobile client, command centre mobile +1 more Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on... CVE-2025-47147 5.7 MediumMarch 3, 2026
• gallagher command centre server, command centre +1 more Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server... CVE-2024-43690 8.0 HighSeptember 11, 2024
• gallagher command centre server, command centre +1 more Improper neutralization of special elements in output (CWE-74) used by the email generation... CVE-2024-21838 6.8 MediumMarch 5, 2024
• gallagher command centre server, command centre +1 more Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command... CVE-2024-21815 9.1 CriticalMarch 5, 2024
• gallagher command centre diagnostics service, command centre +1 more A reliance on untrusted inputs in a security decision could be exploited by a privileged user to... CVE-2023-46686 5.5 MediumDecember 18, 2023
• gallagher command centre, command centre server +1 more An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an... CVE-2023-23584 4.3 MediumDecember 18, 2023
• gallagher command centre server, command centre +1 more Incorrect behavior order in the Command Centre Server could allow privileged users to gain... CVE-2023-23576 4.3 MediumDecember 18, 2023
• gallagher command centre Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed... CVE-2023-23570 5.4 MediumDecember 18, 2023
• gallagher command centre, controller 6000/ controller 7000, controller 6000 firmware +2 more Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000... CVE-2023-22439 3.1 LowDecember 18, 2023
• gallagher command centre Improper privilege validation in Command Centre Server allows authenticated unprivileged... CVE-2023-23568 4.3 MediumJuly 25, 2023
• gallagher command centre Access Zone stack overflow CVE-2023-22363 6.5 MediumJuly 24, 2023
• gallagher command centre Competency access levels not enforced in the server CVE-2023-25074 7.1 HighJuly 24, 2023
• gallagher command centre Improper privilege validation in Command Centre Server allows authenticated operators to modify... CVE-2023-22428 7.6 HighJuly 24, 2023
• gallagher command centre Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date... CVE-2022-26348 8.2 HighJuly 6, 2022
• gallagher command centre Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server... CVE-2021-23193 8.1 HighNovember 18, 2021
• gallagher command centre Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged... CVE-2021-23197 5.2 MediumNovember 18, 2021
• gallagher command centre Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to... CVE-2021-23167 8.1 HighNovember 18, 2021
• gallagher command centre, command center +1 more An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an... CVE-2021-23146 7.1 HighNovember 18, 2021
• gallagher command centre mobile connect for android, command centre mobile connect +1 more Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle... CVE-2021-23162 7.7 HighNovember 18, 2021
• gallagher command centre mobile client for android, command centre mobile client +1 more Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle... CVE-2021-23155 9.0 CriticalNovember 18, 2021
• gallagher command centre A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote... CVE-2021-23230 9.9 CriticalJune 11, 2021
• gallagher command centre Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre... CVE-2021-23211 6.0 MediumJune 11, 2021
• gallagher command centre Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator... CVE-2021-23205 8.1 HighJune 11, 2021
• gallagher command centre Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command... CVE-2021-23204 8.1 HighJune 11, 2021
• gallagher command centre Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre... CVE-2021-23182 6.0 MediumJune 11, 2021
• gallagher command centre Improper Authorization vulnerability in Gallagher Command Centre Server allows command line... CVE-2021-23140 9.9 CriticalJune 11, 2021
• gallagher command centre Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to... CVE-2021-23136 6.5 MediumJune 11, 2021
• gallagher command centre Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or... CVE-2020-16103 8.8 HighDecember 14, 2020
• gallagher command centre Improper Authentication vulnerability in Gallagher Command Centre Server allows an... CVE-2020-16102 7.1 HighDecember 14, 2020
• gallagher command centre SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a... CVE-2020-16104 8.2 HighDecember 14, 2020
• gallagher command centre It is possible for an unauthenticated remote DCOM websocket connection to crash the Command... CVE-2020-16101 7.5 HighSeptember 15, 2020
• gallagher command centre In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5),... CVE-2020-16096 9.9 CriticalSeptember 15, 2020
• gallagher command centre It is possible to enumerate access card credentials via an unauthenticated network connection to... CVE-2020-16098 9.8 CriticalSeptember 15, 2020
• gallagher command centre It is possible for an unauthenticated remote DCOM websocket connection to crash the Command... CVE-2020-16100 7.5 HighSeptember 15, 2020
• gallagher command centre On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)... CVE-2020-16097 7.3 HighSeptember 15, 2020
• gallagher command centre In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour... CVE-2020-16099 4.3 MediumSeptember 15, 2020
• gallagher command centre An issue was discovered in Gallagher Command Centre 7.x before 7.90.991(MR5), 8.00 before 8.00... CVE-2020-7215 5.5 MediumJanuary 20, 2020
• gallagher command centre In Gallagher Command Centre Server v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8.00.1161(MR5)... CVE-2019-19802 6.5 MediumJanuary 17, 2020
• gallagher command centre In Gallagher Command Centre Server versions of v8.10 prior to v8.10.1134(MR4), v8.00 prior to v8... CVE-2019-19801 5.5 MediumJanuary 17, 2020
• gallagher command centre An issue was discovered in Gallagher Command Centre 8.10 before 8.10.1092(MR2). Upon an upgrade,... CVE-2019-15294 9.8 CriticalAugust 28, 2019
• gallagher command centre Gallagher Command Centre before 7.80.939, 7.90.x before 7.90.961, and 8.x before 8.00.1128 allows... CVE-2019-12492 6.5 MediumJune 6, 2019