Command Centre Server
Approved changes feed: RSS · Atom
cpe:2.3:a:gallagher:command_centre_server:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gallagher (1a83fbe6-3e6e-58bd-a69d-5a0946535413) |
|---|---|
| Product | Command Centre Server (5d2e744c-df79-5731-8f82-d535552c2737) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-26053 |
vulnerable | 2026-07-29 00:34:58.013404 |
Details available
MEDIUM (5.3)
An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.
Published: 2026-07-07T03:48:47.708Z
Updated: 2026-07-07T13:37:52.035Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25193 |
vulnerable | 2026-06-08 07:53:19.462351 |
Details available
HIGH (8.1)
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.
Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.
Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
Published: 2026-05-25T05:28:14.766Z
Updated: 2026-05-26T14:24:08.348Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-20757 |
vulnerable | 2026-06-08 07:49:12.531641 |
Details available
LOW (2.5)
Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server.
This issue affects Command Centre Server:
9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior.
Published: 2026-03-03T02:40:45.702Z
Updated: 2026-03-03T15:43:33.823Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48430 |
vulnerable | 2026-06-08 07:27:15.937105 |
Details available
MEDIUM (5.5)
Uncaught Exception (CWE-248) in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will.
This issue affects Command Centre Server:
9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.
Published: 2025-10-23T03:39:31.438Z
Updated: 2025-10-23T15:26:56.990Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-48428 |
vulnerable | 2026-06-08 07:27:15.934640 |
Details available
MEDIUM (6.7)
Cleartext Storage of Sensitive Information (CWE-312) in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site.
This issue affects Command Centre Server: 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.
Published: 2025-10-23T03:39:07.905Z
Updated: 2025-10-23T17:30:36.170Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-47699 |
vulnerable | 2026-06-08 07:27:14.745297 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-46406 |
vulnerable | 2026-06-08 07:27:08.180650 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-41402 |
vulnerable | 2026-06-08 07:25:06.989253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-35981 |
vulnerable | 2026-06-08 07:21:00.204089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-43690 |
vulnerable | 2026-06-08 06:45:52.875438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-42407 |
vulnerable | 2026-06-08 06:43:56.621419 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41724 |
vulnerable | 2026-06-08 06:43:55.005481 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21838 |
vulnerable | 2026-06-08 06:27:36.767572 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21815 |
vulnerable | 2026-06-08 06:27:36.725089 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23584 |
vulnerable | 2026-06-08 05:56:03.710216 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-23576 |
vulnerable | 2026-06-08 05:56:03.348016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.