CVE-2026-25193

🗓️ 25 May 2026 05:28:14Reported by GallagherType

CVE-2026-25193: Installer logs may expose service account credentials for non-default Command Centre accounts; change password.

Reporter	Title	Published	Views	Family All 8
ATTACKERKB	CVE-2026-25193	25 May 202605:28	–	attackerkb
CNNVD	Gallagher Command Centre Service 安全漏洞	25 May 202600:00	–	cnnvd
Cvelist	CVE-2026-25193	25 May 202605:28	–	cvelist
EUVD	EUVD-2026-31636	25 May 202605:28	–	euvd
NVD	CVE-2026-25193	25 May 202607:16	–	nvd
Positive Technologies	PT-2026-43004	25 May 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-25193	26 May 202620:14	–	redhatcve
Vulnrichment	CVE-2026-25193	25 May 202605:28	–	vulnrichment

NVD

Node

gallagher active_directory_syncRange<9.10.05command_centre

gallagher cardholder_sync_utilityRange<9.30.104command_centre

gallagher command_centreRange<9.40.2575

gallagher diagnostics_serviceRange<2.0.9command_centre

gallagher elevator_serviceRange<10.0.8command_centre

gallagher encoding_kiosk_applicationRange<9.60.10command_centre

gallagher entra_id_sync_v1Range<1.0.10command_centre

gallagher entra_id_sync_v2Range<2.0.5command_centre

gallagher event_loggerRange<8.90.16command_centre

gallagher event_sync_utilityRange<8.70.62command_centre

gallagher middleware_frameworkRange<8.90.34command_centre

gallagher nexudus_integrationRange<9.60.21command_centre

gallagher okta_syncRange<9.40.05command_centre

gallagher papercut_interface_integrationRange<9.60.02command_centre

gallagher sip_integrationRange<10.10command_centre

[
  {
    "vendor": "Gallagher",
    "product": "Command Centre Server",
    "versions": [
      {
        "status": "affected",
        "version": "9.40",
        "lessThan": "9.40.2575 (MR2)",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Gallagher",
    "product": "Active Directory Sync",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "9.10.05",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Cardholder Sync Utility",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "9.30.104",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Diagnostics Service",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.0.9",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Elevator Service",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.0.8",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Encoding Kiosk Application",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "9.60.10",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Entra ID Sync",
    "versions": [
      {
        "status": "affected",
        "version": "1.0",
        "lessThan": "1.0.10",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2.0",
        "lessThan": "2.0.5",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Gallagher",
    "product": "Event Sync Utility",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.70.62",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Event Logger",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.90.16",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Middleware Framework",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "8.90.34",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Nexudus Integration",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "9.60.21",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Okta Sync",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "9.40.05",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "Papercut Interface Integration",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "9.60.02",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  },
  {
    "vendor": "Gallagher",
    "product": "SIP Integration",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "10.1.0",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "affected"
  }
]

Source	Link
security	www.security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193

17 Aug 2026 18:21Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.18.1 - 8.6

EPSS0.00136

SSVC

CWE-532