CVE-2025-41402

CVE-2025-41402 affects Gallagher Command Centre Server. Root cause: Client-Side Enforcement of Server-Side Security (CWE-602) allowing a privileged operator to bypass expiry checks and enter invalid competency data. Affected: 9.30 until MR2 vEL9.30.2482, 9.20 until MR4 vEL9.20.2819, 9.10 until MR...

CVE-2025-41402

Client-Side Enforcement of Server-Side Security CWE-602 in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to...

CVE-2025-41402

Client-Side Enforcement of Server-Side Security CWE-602 in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to...

CVE-2025-35981

Exposure of Private Personal Information to an Unauthorized Actor CWE-359 in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 MR1, 9.20.2337...

CVE-2025-35981

Exposure of Private Personal Information to an Unauthorized Actor CWE-359 in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 MR1, 9.20.2337...

CVE-2025-35981

The CVE-2025-35981 issue affects Gallagher Command Centre Server versions 9.30.1874 (MR1), 9.20.2337 (MR3), and 9.10.3194 (MR6). It describes exposure of private personal information to an unauthorized, privileged Operator who can view limited cardholder data outside normal permissions. The docum...

EUVD-2025-35651

Exposure of Private Personal Information to an Unauthorized Actor CWE-359 in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 MR1, 9.20.2337...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from improper enforcement of server-side security mechanisms on the client side,...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server that stems from the exposure of sensitive system information in the Gallagher Morpho...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system for monitoring and managing infrastructure in buildings from Gallagher New Zealand. A security vulnerability exists in Gallagher Command Centre Server that stems from an uncaught exception that could cause an authorized privileged operator to...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system used by Gallagher New Zealand to monitor and manage infrastructure in buildings. A security vulnerability exists in Gallagher Command Centre Server, which stems from storing sensitive information in clear text and could lead to compromised...

Gallagher Command Centre Server 安全漏洞

Gallagher Command Centre Server is a management system for monitoring and managing infrastructure in buildings from Gallagher New Zealand. A security vulnerability exists in Gallagher Command Centre Server versions 9.30.1874, 9.20.2337, and 9.10.3194, which stems from a privileged operator being...

Exploit for CVE-2025-11371

CVE-2025-11371 Overview This repository contains a proof-...

CVE-2025-11498

creationtimestamp| type| source ---|---|--- 2025-10-15 14:00:01+00:00| seen| https://cyber.gc.ca/en/alerts-advisories/control-systems-abb-security-advisory-av25-670 2026-05-21 05:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-141-04...

CVE-2025-59234

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0315 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 20:57:38+00:00| seen|...

CVE-2025-59227

creationtimestamp| type| source ---|---|--- 2025-10-14 16:38:05+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0315 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-14 20:57:38+00:00| seen|...

CVE-2025-55240

creationtimestamp| type| source ---|---|--- 2025-10-14 16:21:47+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0313 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review...

CVE-2025-55248

creationtimestamp| type| source ---|---|--- 2025-10-14 16:21:47+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0313 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-16 12:00:53+00:00| seen|...

CVE-2025-55679

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-24 06:24:42+00:00| seen|...

CVE-2025-50174

creationtimestamp| type| source ---|---|--- 2025-10-14 16:03:45+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0310 2025-10-14 16:38:44+00:00| seen| https://www.thezdi.com/blog/2025/10/14/the-october-2025-security-update-review 2025-10-15 10:34:03+00:00| seen|...