Advisories · Technology

Gallagher Command Centre Server.

Every CVE that names Gallagher Command Centre Server among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-26053 CVE record

CVSS 5.3 Medium

Gallagher Command Centre Server: An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server…
- Gallagher Command Centre Server
- Privilege escalation
Not analysed yet 7 Jul 2026
CVE-2026-25193 CVE record

CVSS 8.1 High

Sensitive information in log files in Gallagher Command Centre Server and others
- Gallagher Command Centre Server
- Gallagher Active Directory Sync
- Information disclosure
Not analysed yet 25 May 2026
CVE-2026-20757 CVE record

CVSS 2.5 Low

Gallagher Command Centre Server: Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a…
- Gallagher Command Centre Server
- CWE-667
Not analysed yet 3 Mar 2026
CVE-2025-48430 CVE record

CVSS 5.5 Medium

Gallagher Command Centre Server: Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and…
- Gallagher Command Centre Server
- CWE-248
Not analysed yet 23 Oct 2025
CVE-2025-48428 CVE record

CVSS 6.7 Medium

Cleartext storage of sensitive information in Gallagher Command Centre Server
- Gallagher Command Centre Server
- Information disclosure
Not analysed yet 23 Oct 2025
CVE-2025-47699 CVE record

CVSS 9.9 CriticalCritical · CVSS 9+

Gallagher Command Centre Server: Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in…
- Gallagher Command Centre Server
- Information disclosure
Not analysed yet 23 Oct 2025
CVE-2025-41402 CVE record

CVSS 5.5 Medium

Gallagher Command Centre Server: Client-Side Enforcement of Server-Side Security (CWE-602) in the Command Centre Server…
- Gallagher Command Centre Server
- CWE-602
Not analysed yet 23 Oct 2025
CVE-2025-35981 CVE record

CVSS 5.5 Medium

Exposure of personal information in Gallagher Command Centre Server
- Gallagher Command Centre Server
- Information disclosure
Not analysed yet 23 Oct 2025
CVE-2025-46406 CVE record

CVSS 5.6 Medium

Gallagher Command Centre Server: A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a…
- Gallagher Command Centre Server
- Privilege escalation
Not analysed yet 10 Jul 2025
CVE-2024-41724 CVE record

CVSS 8.7 High

Improper certificate validation in Gallagher Command Centre Server
- Gallagher Command Centre Server
- Weak cryptography or TLS
Not analysed yet 10 Mar 2025
CVE-2024-42407 CVE record

CVSS 8.5 High

Sensitive information in log files in Gallagher Command Centre Server
- Gallagher Command Centre Server
- Information disclosure
Not analysed yet 12 Dec 2024
CVE-2024-43690 CVE record

CVSS 8.0 High

Gallagher Command Centre Server: Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre…
- Gallagher Command Centre Server
- CWE-829
Not analysed yet 11 Sept 2024
CVE-2024-21838 CVE record

CVSS 6.8 Medium

Injection in Gallagher Command Centre Server
- Gallagher Command Centre Server
- Other injection
Not analysed yet 5 Mar 2024
CVE-2024-21815 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Insufficiently protected credentials in Gallagher Command Centre Server
- Gallagher Command Centre Server
- Hard-coded credentials
Not analysed yet 5 Mar 2024
CVE-2023-23584 CVE record

CVSS 4.3 Medium

An observable response discrepancy in the Gallagher Command Centre RESTAPI allows an insufficiently-privileged user to infer the presence of items that would not otherwise be viewable.
- Gallagher Command Centre Server
- CWE-204
Not analysed yet 18 Dec 2023
CVE-2023-23576 CVE record

CVSS 4.3 Medium

Gallagher Command Centre Server: Incorrect behavior order in the Command Centre Server could allow privileged users to…
- Gallagher Command Centre Server
- CWE-696
Not analysed yet 18 Dec 2023