# cve.now: Gallagher

The newest entries naming Gallagher as an affected vendor (up to 200), of 70 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-27844](https://cve.now/CVE-2026-27844.md): Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized oper (CVSS 2.7)
- [CVE-2026-27790](https://cve.now/CVE-2026-27790.md): Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific req (CVSS 2.7)
- [CVE-2026-26053](https://cve.now/CVE-2026-26053.md): An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privile (CVSS 5.3)
- [CVE-2026-25193](https://cve.now/CVE-2026-25193.md): Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentia (CVSS 8.1)
- [CVE-2026-20801](https://cve.now/CVE-2026-20801.md): Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integr (CVSS 5.6)
- [CVE-2026-20757](https://cve.now/CVE-2026-20757.md): Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service i (CVSS 2.5)
- [CVE-2025-47147](https://cve.now/CVE-2025-47147.md): Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with acc (CVSS 5.7)
- [CVE-2025-64734](https://cve.now/CVE-2025-64734.md): Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to pe (CVSS 2.4)
- [CVE-2025-52578](https://cve.now/CVE-2025-52578.md): Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker w (CVSS 5.7)
- [CVE-2025-52457](https://cve.now/CVE-2025-52457.md): Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific (CVSS 5.7)
- [CVE-2025-48430](https://cve.now/CVE-2025-48430.md): Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at (CVSS 5.5)
- [CVE-2025-48428](https://cve.now/CVE-2025-48428.md): Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to th (CVSS 6.7)
- [CVE-2025-47699](https://cve.now/CVE-2025-47699.md): Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an auth (CVSS 9.9)
- [CVE-2025-41402](https://cve.now/CVE-2025-41402.md): Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server allows a privileged operator to enter invalid compete (CVSS 5.5)
- [CVE-2025-35981](https://cve.now/CVE-2025-35981.md): Exposure of Private Personal Information to an Unauthorized Actor (CWE-359) in the Command Centre Server allows a privileged Operator to vie (CVSS 5.5)
- [CVE-2025-46406](https://cve.now/CVE-2025-46406.md): A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one D (CVSS 5.6)
- [CVE-2025-44003](https://cve.now/CVE-2025-44003.md): Missing Release of Resource after Effective Lifetime (CWE-772) in the Gallagher T-Series Reader allows an attacker with physical access to t (CVSS 4.3)
- [CVE-2025-35983](https://cve.now/CVE-2025-35983.md): Improper Certificate Validation (CWE-295) in the Controller 7000 OneLink implementation could allow an unprivileged attacker to perform a li (CVSS 6.5)
- [CVE-2024-41724](https://cve.now/CVE-2024-41724.md): Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server. (CVSS 8.7)
- [CVE-2024-43107](https://cve.now/CVE-2024-43107.md): Improper Certificate Validation (CWE-295) in the Gallagher Milestone Integration Plugin (MIP) permits unauthenticated messages (e.g. (CVSS 7.2)
- [CVE-2024-42407](https://cve.now/CVE-2024-42407.md): Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenti (CVSS 8.5)
- [CVE-2024-41146](https://cve.now/CVE-2024-41146.md): Use of Multiple Resources with Duplicate Identifier (CWE-694) in the Controller 6000 and Controller 7000 Platforms could allow an attacker w (CVSS 4.6)
- [CVE-2024-43690](https://cve.now/CVE-2024-43690.md): Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to per (CVSS 8.0)
- [CVE-2024-39808](https://cve.now/CVE-2024-39808.md): Incorrect Calculation of Buffer Size (CWE-131) in the Controller 6000 and Controller 7000 OSDP message handling, allows an attacker with phy (CVSS 4.6)
- [CVE-2024-24972](https://cve.now/CVE-2024-24972.md): Buffer Copy without Checking Size of Input (CWE-120) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authorise (CVSS 6.5)
- [CVE-2024-23906](https://cve.now/CVE-2024-23906.md): Improper Neutralization of Input During Web Page Generation (CWE-79) in the Controller 6000 and Controller 7000 diagnostic webpage allows an (CVSS 6.1)
- [CVE-2024-23317](https://cve.now/CVE-2024-23317.md): External Control of File Name or Path (CWE-73) in the Controller 6000 and Controller 7000 allows an attacker with local access to the Contro (CVSS 6.3)
- [CVE-2024-23194](https://cve.now/CVE-2024-23194.md): Improper output Neutralization for Logs (CWE-117) in the Command Centre API Diagnostics Endpoint could allow an attacker limited ability to (CVSS 3.3)
- [CVE-2024-22387](https://cve.now/CVE-2024-22387.md): External Control of Critical State Data (CWE-642) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticate (CVSS 6.8)
- [CVE-2024-23485](https://cve.now/CVE-2024-23485.md): Improperly Preserved Integrity of Hardware Configuration State During a Power Save/Restore Operation (CWE-1304) in the Controller 6000 and 7 (CVSS 4.6)
- [CVE-2024-22383](https://cve.now/CVE-2024-22383.md): Missing release of resource after effective lifetime (CWE-772) in the Controller 7000 resulted in HBUS connected T-Series readers to not au (CVSS 6.2)
- [CVE-2024-21838](https://cve.now/CVE-2024-21838.md): Improper neutralization of special elements in output (CWE-74) used by the email generation feature of the Command Centre Server could lead (CVSS 6.8)
- [CVE-2024-21815](https://cve.now/CVE-2024-21815.md): Insufficiently protected credentials (CWE-522) for third party DVR integrations to the Command Centre Server are accessible to authenticate (CVSS 9.1)
- [CVE-2023-46686](https://cve.now/CVE-2023-46686.md): A reliance on untrusted inputs in a security decision could be exploited by a privileged user to configure the Gallagher Command Centre Dia (CVSS 5.5)
- [CVE-2023-41967](https://cve.now/CVE-2023-41967.md): Sensitive information uncleared after debug/power state transition in the Controller 6000 could be abused by an attacker with knowledge of (CVSS 2.4)
- [CVE-2023-24590](https://cve.now/CVE-2023-24590.md): A format string issue in the Controller 6000's optional diagnostic web interface can be used to write/read from memory, and in some insta (CVSS 7.5)
- [CVE-2023-23584](https://cve.now/CVE-2023-23584.md): An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence o (CVSS 4.3)
- [CVE-2023-23576](https://cve.now/CVE-2023-23576.md): Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than inte (CVSS 4.3)
- [CVE-2023-23570](https://cve.now/CVE-2023-23570.md): Client-Side enforcement of Server-Side security for the Command Centre server could be bypassed and lead to invalid configuration with unde (CVSS 5.4)
- [CVE-2023-22439](https://cve.now/CVE-2023-22439.md): Improper input validation of a large HTTP request in the Controller 6000 and Controller 7000 optional diagnostic web interface (Port 80) ca (CVSS 3.1)
- [CVE-2023-6355](https://cve.now/CVE-2023-6355.md): Incorrect selection of fuse values in the Controller 7000 platform allows an attacker to bypass some protection mechanisms to enable local (CVSS 6.8)
- [CVE-2023-23568](https://cve.now/CVE-2023-23568.md): Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields. (CVSS 4.3)
- [CVE-2023-22363](https://cve.now/CVE-2023-22363.md): Access Zone stack overflow (CVSS 6.5)
- [CVE-2023-25074](https://cve.now/CVE-2023-25074.md): Competency access levels not enforced in the server (CVSS 7.1)
- [CVE-2023-22428](https://cve.now/CVE-2023-22428.md): Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage. (CVSS 7.6)
- [CVE-2023-24584](https://cve.now/CVE-2023-24584.md): Controller 6000 buffer overflow via upload feature in web interface (CVSS 7.5)
- [CVE-2022-26348](https://cve.now/CVE-2022-26348.md): Command Centre Server is vulnerable to SQL Injection via Windows Registry settings for date fields on the server. (CVSS 8.2)
- [CVE-2022-26078](https://cve.now/CVE-2022-26078.md): Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. (CVSS 7.5)
- [CVE-2021-23193](https://cve.now/CVE-2021-23193.md): Improper privilege validation vulnerability in COM Interface of Gallagher Command Centre Server allows authenticated unprivileged operators (CVSS 8.1)
- [CVE-2021-23197](https://cve.now/CVE-2021-23197.md): Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account (CVSS 5.2)
- [CVE-2021-23167](https://cve.now/CVE-2021-23167.md): Improper certificate validation vulnerability in SMTP Client allows man-in-the-middle attack to retrieve sensitive information from the Comm (CVSS 8.1)
- [CVE-2021-23146](https://cve.now/CVE-2021-23146.md): An Incomplete Comparison with Missing Factors vulnerability in the Gallagher Controller allows an attacker to bypass PIV verification. (CVSS 7.1)
- [CVE-2021-23162](https://cve.now/CVE-2021-23162.md): Improper validation of the cloud certificate chain in Mobile Connect allows man-in-the-middle attack to impersonate the legitimate Command C (CVSS 7.7)
- [CVE-2021-23155](https://cve.now/CVE-2021-23155.md): Improper validation of the cloud certificate chain in Mobile Client allows man-in-the-middle attack to impersonate the legitimate Command Ce (CVSS 9.0)
- [CVE-2021-23230](https://cve.now/CVE-2021-23230.md): A SQL Injection vulnerability in the OPCUA interface of Gallagher Command Centre allows a remote unprivileged Command Centre Operator to mod (CVSS 9.9)
- [CVE-2021-23211](https://cve.now/CVE-2021-23211.md): Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows Cloud end-to-end encryption key (CVSS 6.0)
- [CVE-2021-23205](https://cve.now/CVE-2021-23205.md): Improper Encoding or Escaping in Gallagher Command Centre Server allows a Command Centre Operator to alter the configuration of Controllers (CVSS 8.1)
- [CVE-2021-23204](https://cve.now/CVE-2021-23204.md): Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Gallagher Command Centre Server allows OSDP key material to be e (CVSS 8.1)
- [CVE-2021-23182](https://cve.now/CVE-2021-23182.md): Cleartext Storage of Sensitive Information in Memory vulnerability in Gallagher Command Centre Server allows OSDP reader master keys to be d (CVSS 6.0)
- [CVE-2021-23140](https://cve.now/CVE-2021-23140.md): Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command (CVSS 9.9)
- [CVE-2021-23136](https://cve.now/CVE-2021-23136.md): Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Ce (CVSS 6.5)
- [CVE-2020-16103](https://cve.now/CVE-2020-16103.md): Type confusion in Gallagher Command Centre Server allows a remote attacker to crash the server or possibly cause remote code execution. (CVSS 8.8)
- [CVE-2020-16102](https://cve.now/CVE-2020-16102.md): Improper Authentication vulnerability in Gallagher Command Centre Server allows an unauthenticated remote attacker to create items with inva (CVSS 7.1)
- [CVE-2020-16104](https://cve.now/CVE-2020-16104.md): SQL Injection vulnerability in Enterprise Data Interface of Gallagher Command Centre allows a remote attacker with 'Edit Enterprise Data Int (CVSS 8.2)
- [CVE-2020-16101](https://cve.now/CVE-2020-16101.md): It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service due to an out-of-bounds buffer ac (CVSS 7.5)
- [CVE-2020-16096](https://cve.now/CVE-2020-16096.md): In Gallagher Command Centre versions 8.10 prior to 8.10.1134(MR4), 8.00 prior to 8.00.1161(MR5), 7.90 prior to 7.90.991(MR5), 7.80 prior to (CVSS 9.9)
- [CVE-2020-16098](https://cve.now/CVE-2020-16098.md): It is possible to enumerate access card credentials via an unauthenticated network connection to the server in versions of Command Centre v8 (CVSS 9.8)
- [CVE-2020-16100](https://cve.now/CVE-2020-16100.md): It is possible for an unauthenticated remote DCOM websocket connection to crash the Command Centre service's DCOM websocket thread due to im (CVSS 7.5)
- [CVE-2020-16097](https://cve.now/CVE-2020-16097.md): On controllers running versions of v8.20 prior to vCR8.20.200221b (distributed in v8.20.1093(MR2)), v8.10 prior to vGR8.10.179 (distributed (CVSS 7.3)
- [CVE-2020-16099](https://cve.now/CVE-2020-16099.md): In Gallagher Command Centre v8.20 prior to v8.20.1093(MR2) it is possible to create Guard Tour events that when accessed via things like rep (CVSS 4.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gallagher
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.