CVE-2025-35981

Exposure of Private Personal Information to an Unauthorized Actor CWE-359 in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 MR1, 9.20.2337...

CVE-2025-35981

The CVE-2025-35981 issue affects Gallagher Command Centre Server versions 9.30.1874 (MR1), 9.20.2337 (MR3), and 9.10.3194 (MR6). It describes exposure of private personal information to an unauthorized, privileged Operator who can view limited cardholder data outside normal permissions. The docum...

CVE-2025-35981

Exposure of Private Personal Information to an Unauthorized Actor CWE-359 in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 MR1, 9.20.2337...

PT-2025-43425

Name of the Vulnerable Software and Affected Versions Command Centre Server versions prior to vEL9.30.2482 MR2 Command Centre Server versions prior to vEL9.20.2819 MR4 Command Centre Server versions prior to vEL9.10.3672 MR7 Command Centre Server versions prior to vEL9.00.3831 MR8 Command Centre...

PT-2025-43422

Name of the Vulnerable Software and Affected Versions Command Centre Server versions 9.00 and prior Command Centre Server versions 9.10 through 9.10.3672 Command Centre Server versions 9.20 through 9.20.2819 Command Centre Server versions 9.30 through 9.30.2482 Description A flaw exists in the...

PT-2025-43421

Name of the Vulnerable Software and Affected Versions Command Centre Server versions 9.10.3194 MR6, 9.20.2337 MR3, and 9.30.1874 MR1 Description A flaw exists in Command Centre Server that could allow a privileged Operator to view limited personal data about a Cardholder that they would not...

CVE-2025-48430: Uncaught Exception

Uncaught Exception CWE-248 in the Command Centre Server allows an Authorized and Privileged Operator to crash the Command Centre Server at will. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to vEL9.10.3672 MR7, 9.00 prior to...

CVE-2025-48428: Cleartext Storage of Sensitive Information

Cleartext Storage of Sensitive Information CWE-312 in the Gallagher Morpho integration could allow an authenticated user with access to the Command Centre Server to export a specific signing key while in use allowing them to deploy a compromised or counterfeit device on that site. This issue...

CVE-2025-35981: Exposure of Private Personal Information to an Unauthorized Actor

Exposure of Private Personal Information to an Unauthorized Actor CWE-359 in the Command Centre Server allows a privileged Operator to view limited personal data about a Cardholder they would not normally have permissions to view. This issue affects Command Centre Server: 9.30.1874 MR1, 9.20.2337...

CVE-2025-41402: Client-Side Enforcement of Server-Side Security

Client-Side Enforcement of Server-Side Security CWE-602 in the Command Centre Server allows a privileged operator to enter invalid competency data, bypassing expiry checks. This issue affects Command Centre Server: 9.30 prior to vEL9.30.2482 MR2, 9.20 prior to vEL9.20.2819 MR4, 9.10 prior to...

PT-2025-43424

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Server versions prior to 9.20.2819 MR4 Gallagher Command Centre Server versions prior to 9.10.3672 MR7 Gallagher Command Centre Server versions prior to 9.00.3831 MR8 Gallagher Command Centre Server version 8.90...

CVE-2025-47699: Exposure of Sensitive System Information to an Unauthorized Control Sphere

Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497 in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices. This issue affects Command Centre Server: 9.30 prior to...

EUVD-2021-10300

Malware in sbrugna...

EUVD-2024-40426

Malicious code in bioql PyPI...

EUVD-2023-27676

Malicious code in bioql PyPI...

EUVD-2023-29053

Malicious code in bioql PyPI...

EUVD-2023-27668

Malicious code in bioql PyPI...

EUVD-2023-26591

Malicious code in bioql PyPI...

EUVD-2022-30907

Malicious code in bioql PyPI...

PT-2025-28974 · Unknown · Command Centre Server

Name of the Vulnerable Software and Affected Versions: Command Centre Server versions prior to 9.30.1874 MR1 Command Centre Server versions prior to 9.20.2337 MR3 Command Centre Server versions prior to 9.10.3194 MR6 Command Centre Server versions prior to 9.00.3371 MR7 Command Centre Server...