Gallagher Controller 7000 vulnerabilities

• gallagher command centre, controller 7000 and 6000 +1 more Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface... CVE-2026-27844 2.7 LowJuly 7, 2026
• gallagher controller 7000 Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could... CVE-2025-35983 6.5 MediumJuly 10, 2025
• gallagher controller 6000 and controller 7000 Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and... CVE-2024-41146 4.6 MediumDecember 12, 2024
• gallagher controller 6000 and controller 7000 Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP... CVE-2024-39808 4.6 MediumSeptember 11, 2024
• gallagher controller 6000 and controller 7000 Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000... CVE-2024-24972 6.5 MediumSeptember 11, 2024
• gallagher controller 6000 and controller 7000 Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and... CVE-2024-23906 6.1 MediumSeptember 11, 2024
• gallagher controller 6000 and controller 7000, controller 6000 firmware, controller 7000 firmware +2 more External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows... CVE-2024-23317 6.3 MediumJuly 11, 2024
• gallagher controller 6000 and controller 7000 External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000... CVE-2024-22387 6.8 MediumJuly 11, 2024
• gallagher controller 6000 and controller 7000 Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore... CVE-2024-23485 4.6 MediumJuly 11, 2024
• gallagher controller 7000 Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted... CVE-2024-22383 6.2 MediumMarch 5, 2024
• gallagher command centre, controller 6000/ controller 7000, controller 6000 firmware +2 more Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000... CVE-2023-22439 3.1 LowDecember 18, 2023
• gallagher controller 7000, controller 7000 firmware +1 more Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass... CVE-2023-6355 6.8 MediumDecember 18, 2023