CVE-2025-47699

Exposure of Sensitive System Information to an Unauthorized Control Sphere CWE-497 in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices. This issue affects Command Centre Server: 9.30 prior to...

PT-2025-43423

Name of the Vulnerable Software and Affected Versions Gallagher Command Centre Server versions prior to 9.00.3831 MR8, versions 9.10 prior to vEL9.10.3672 MR7, versions 9.20 prior to vEL9.20.2819 MR4, versions 9.30 prior to vEL9.30.2482 MR2, and all versions of 8.90 and prior. Description An issu...

Missing event & timelock for critical onlyAdmin functions

Handle 0xRajeev Vulnerability details Impact onlyAdmin functions that change critical contract parameters/addresses/state should emit events and consider adding timelocks so that users and other privileged roles can detect upcoming changes by offchain monitoring of events and have the time to rea...