Gallagher vulnerabilities

CVEs per yearBy the year they were published

1. 20209
2. 202113
3. 20222
4. 202313
5. 202415
6. 202512
7. 20266

Newest CVEs

• CVE-2026-27844

  Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a…

  Gallagher · Controller 7000 and 6000

  Low2.7
• CVE-2026-27790

  Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in…

  Gallagher · T-20 Readers

  Low2.7
• CVE-2026-26053

  An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some…

  Gallagher · Command Centre Server

  Medium5.3
• CVE-2026-25193

  Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.…

  Gallagher · Command Centre Server

  High8.1
• CVE-2026-20801

  Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows…

  Gallagher · NxWitness VMS and Hanwha VMS Integrations

  Medium5.6
• CVE-2026-20757

  Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command…

  Gallagher · Command Centre Server

  Low2.5
• CVE-2025-47147

  Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in…

  Gallagher · Command Centre Mobile Client

  Medium5.7
• CVE-2025-64734

  Missing Release of Resource after Effective Lifetime (CWE-772) in the T21 Reader allows an attacker with physical access to the Reader to perform a…

  Gallagher · T21 Reader

  Low2.4
• CVE-2025-52578

  Incorrect Usage of Seeds in Pseudo-Random Number Generator (CWE- 335) vulnerability in the High Sec ELM may allow a sophisticated attacker with physical…

  Gallagher · High Sec End of Line Module

  Medium5.7
• CVE-2025-52457

  Observable Timing Discrepancy (CWE-208) in HBUS devices may allow an attacker with physical access to the device to extract device-specific keys, potentially…

  Gallagher · HBUS Devices

  Medium5.7