Vulnerability-Lookup

CVE-2026-25193 (GCVE-0-2026-25193)

Vulnerability from cvelistv5 – Published: 2026-05-25 05:28 – Updated: 2026-05-26 14:24

Summary

Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-05-26 14:24 UTC

CWE

CWE-532 - Insertion of sensitive information into log file

Assigner

Gallagher icscert root

References

1 reference

URL	Tags
https://security.gallagher.com/en-NZ/Security-Adv…

Impacted products

14 products

Vendor	Product	Version	CPE status
Gallagher	Command Centre Server	Affected: 9.40 , < 9.40.2575 (MR2) (custom)	guessed
Gallagher	Active Directory Sync	Affected: 0 , < 9.10.05 (custom)	guessed
Gallagher	Cardholder Sync Utility	Affected: 0 , < 9.30.104 (custom)	guessed
Gallagher	Diagnostics Service	Affected: 0 , < 2.0.9 (custom)	guessed
Gallagher	Elevator Service	Affected: 0 , < 10.0.8 (custom)	guessed
Gallagher	Encoding Kiosk Application	Affected: 0 , < 9.60.10 (custom)	guessed
Gallagher	Entra ID Sync	Affected: 1.0 , < 1.0.10 (custom) Affected: 2.0 , < 2.0.5 (custom)	guessed
Gallagher	Event Sync Utility	Affected: 0 , < 8.70.62 (custom)	guessed
Gallagher	Event Logger	Affected: 0 , < 8.90.16 (custom)	guessed
Gallagher	Middleware Framework	Affected: 0 , < 8.90.34 (custom)	guessed
Gallagher	Nexudus Integration	Affected: 0 , < 9.60.21 (custom)	guessed
Gallagher	Okta Sync	Affected: 0 , < 9.40.05 (custom)	guessed
Gallagher	Papercut Interface Integration	Affected: 0 , < 9.60.02 (custom)	guessed
Gallagher	SIP Integration	Affected: 0 , < 10.1.0 (custom)	guessed

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25193",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-26T14:24:00.870402Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-26T14:24:08.348Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Command Centre Server",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.2575 (MR2)",
              "status": "affected",
              "version": "9.40",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Active Directory Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.10.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Cardholder Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.30.104",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Diagnostics Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "2.0.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Elevator Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Encoding Kiosk Application",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Entra ID Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "1.0.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "2.0.5",
              "status": "affected",
              "version": "2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.70.62",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Logger",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.16",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Middleware Framework",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.34",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Nexudus Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.21",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Okta Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Papercut Interface Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "SIP Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eInsertion of Sensitive Information into Log File (CWE-532)\u0026nbsp;in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\u003cbr\u003e\u003cb\u003eMitigating Factor:\u003c/b\u003e\u0026nbsp;Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\u003c/p\u003e\u003cdiv\u003e\u003cb\u003eMitigation:\u0026nbsp;\u003c/b\u003eFor sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.\u003c/div\u003e"
            }
          ],
          "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of sensitive information into log file",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-25T05:28:14.766Z",
        "orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc",
        "shortName": "Gallagher"
      },
      "references": [
        {
          "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc",
    "assignerShortName": "Gallagher",
    "cveId": "CVE-2026-25193",
    "datePublished": "2026-05-25T05:28:14.766Z",
    "dateReserved": "2026-03-01T23:45:09.705Z",
    "dateUpdated": "2026-05-26T14:24:08.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-25193",
      "date": "2026-08-20",
      "epss": "0.00136",
      "percentile": "0.0353"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-25193\",\"sourceIdentifier\":\"disclosures@gallagher.com\",\"published\":\"2026-05-25T07:16:14.263\",\"lastModified\":\"2026-08-17T18:21:14.433\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\\n\\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\\\Gallagher\\\\Command Centre.\"},{\"lang\":\"es\",\"value\":\"La inserci\u00f3n de informaci\u00f3n sensible en el archivo de registro (CWE-532) en algunos instaladores del Servicio Command Centre podr\u00eda llevar a la exposici\u00f3n de las credenciales de la cuenta de servicio.\\nFactor de mitigaci\u00f3n: Solo los sitios que instalan los Servicios Command Centre con una cuenta de servicio personalizada (no la cuenta de servicio de red predeterminada) se ven potencialmente afectados.\\n\\nMitigaci\u00f3n: Para los sitios preocupados por la exposici\u00f3n, la acci\u00f3n recomendada es cambiar la contrase\u00f1a de la cuenta de servicio. Tambi\u00e9n pueden eliminar cualquier archivo de registro del instalador, que suelen encontrarse en %programdata%\\\\Gallagher\\\\Command Centre.\"}],\"affected\":[{\"source\":\"disclosures@gallagher.com\",\"affectedData\":[{\"vendor\":\"Gallagher\",\"product\":\"Command Centre Server\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"9.40\",\"lessThan\":\"9.40.2575 (MR2)\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Active Directory Sync\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.10.05\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Cardholder Sync Utility\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.30.104\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Diagnostics Service\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.0.9\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Elevator Service\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"10.0.8\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Encoding Kiosk Application\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.60.10\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Entra ID Sync\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"1.0\",\"lessThan\":\"1.0.10\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"2.0\",\"lessThan\":\"2.0.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Event Sync Utility\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"8.70.62\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Event Logger\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"8.90.16\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Middleware Framework\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"8.90.34\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Nexudus Integration\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.60.21\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Okta Sync\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.40.05\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Papercut Interface Integration\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.60.02\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"SIP Integration\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"10.1.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"disclosures@gallagher.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H\",\"baseScore\":8.6,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.8,\"impactScore\":6.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-26T14:24:00.870402Z\",\"id\":\"CVE-2026-25193\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"disclosures@gallagher.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-532\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:active_directory_sync:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"9.10.05\",\"matchCriteriaId\":\"86C6567A-2A09-4BB9-8CB8-F805FB90C1B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:cardholder_sync_utility:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"9.30.104\",\"matchCriteriaId\":\"A6D149C7-99B1-4AE7-8A55-C9E580B90C36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*\",\"versionEndExcluding\":\"9.40.2575\",\"matchCriteriaId\":\"2D465376-3887-4E00-A818-2B16D04C0A57\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:diagnostics_service:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"2.0.9\",\"matchCriteriaId\":\"72E4DF3E-D733-471A-AAA6-FFA8D45D7E14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:elevator_service:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"10.0.8\",\"matchCriteriaId\":\"0F2740A2-A1F8-4196-AFAF-57C06953FBDF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:encoding_kiosk_application:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"9.60.10\",\"matchCriteriaId\":\"4D778901-4327-47EA-ACF6-ADDEFF118A20\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:entra_id_sync_v1:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"1.0.10\",\"matchCriteriaId\":\"146602EB-32A2-4C49-8D56-1E92F9408F77\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:entra_id_sync_v2:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"2.0.5\",\"matchCriteriaId\":\"8173A618-EBE2-4B67-AFC3-B899D895BBE4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:event_logger:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"8.90.16\",\"matchCriteriaId\":\"BE2CC85C-1091-4CCB-A446-F3181E52739C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:event_sync_utility:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"8.70.62\",\"matchCriteriaId\":\"623E81B3-AE73-4322-91E1-7DD7787A785F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:middleware_framework:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"8.90.34\",\"matchCriteriaId\":\"F8D655FD-6395-47B8-9D42-7FCA2CC87CD4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:nexudus_integration:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"9.60.21\",\"matchCriteriaId\":\"CA4AB723-E187-4CB2-8623-5DB3980DF815\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:okta_sync:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"9.40.05\",\"matchCriteriaId\":\"BB2734E6-EC24-432A-AC0E-1B52081977D9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:papercut_interface_integration:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"9.60.02\",\"matchCriteriaId\":\"3CBA27C1-F4DB-4032-A5D6-8DC317399E17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:gallagher:sip_integration:*:*:*:*:*:command_centre:*:*\",\"versionEndExcluding\":\"10.10\",\"matchCriteriaId\":\"6E28597D-298E-4935-91EB-9D30124EC64E\"}]}]}],\"references\":[{\"url\":\"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193\",\"source\":\"disclosures@gallagher.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2026-05-26T20:13:55+00:00",
      "cve": "CVE-2026-25193",
      "id": "CVE-2026-25193",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-25193",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25193.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-25193\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-26T14:24:00.870402Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-26T14:24:05.451Z\"}}], \"cna\": {\"source\": {\"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Gallagher\", \"product\": \"Command Centre Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.40\", \"lessThan\": \"9.40.2575 (MR2)\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Active Directory Sync\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.10.05\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Cardholder Sync Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.30.104\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Diagnostics Service\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.9\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Elevator Service\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"10.0.8\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Encoding Kiosk Application\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.60.10\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Entra ID Sync\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0\", \"lessThan\": \"1.0.10\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"2.0\", \"lessThan\": \"2.0.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Event Sync Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.70.62\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Event Logger\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.90.16\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Middleware Framework\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.90.34\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Nexudus Integration\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.60.21\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Okta Sync\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.40.05\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Papercut Interface Integration\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.60.02\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"SIP Integration\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"10.1.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.2\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Insertion of Sensitive Information into Log File (CWE-532)\\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\\u202f\\nMitigating Factor:\\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\\n\\nMitigation:\\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\\\Gallagher\\\\Command Centre.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eInsertion of Sensitive Information into Log File (CWE-532)\u0026nbsp;in some Command Centre Service installers could lead to Service Account credentials exposure.\\u202f\u003cbr\u003e\u003cb\u003eMitigating Factor:\u003c/b\u003e\u0026nbsp;Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\u003c/p\u003e\u003cdiv\u003e\u003cb\u003eMitigation:\u0026nbsp;\u003c/b\u003eFor sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\\\Gallagher\\\\Command Centre.\u003c/div\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-532\", \"description\": \"CWE-532 Insertion of sensitive information into log file\"}]}], \"providerMetadata\": {\"orgId\": \"0c426f27-3ee1-4eff-be88-288d5a1822bc\", \"shortName\": \"Gallagher\", \"dateUpdated\": \"2026-05-25T05:28:14.766Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-25193\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-26T14:24:08.348Z\", \"dateReserved\": \"2026-03-01T23:45:09.705Z\", \"assignerOrgId\": \"0c426f27-3ee1-4eff-be88-288d5a1822bc\", \"datePublished\": \"2026-05-25T05:28:14.766Z\", \"assignerShortName\": \"Gallagher\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-25193

Vulnerability from fkie_nvd - Published: 2026-05-25 07:16 - Updated: 2026-08-17 18:21

Severity

8.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
8.6 (High) - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Summary

References

	URL	Tags
	disclosures@gallagher.com	https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193	Vendor Advisory

Impacted products

Vendor	Product	Version
gallagher	active_directory_sync	*
gallagher	cardholder_sync_utility	*
gallagher	command_centre	*
gallagher	diagnostics_service	*
gallagher	elevator_service	*
gallagher	encoding_kiosk_application	*
gallagher	entra_id_sync_v1	*
gallagher	entra_id_sync_v2	*
gallagher	event_logger	*
gallagher	event_sync_utility	*
gallagher	middleware_framework	*
gallagher	nexudus_integration	*
gallagher	okta_sync	*
gallagher	papercut_interface_integration	*
gallagher	sip_integration	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Command Centre Server",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.2575 (MR2)",
              "status": "affected",
              "version": "9.40",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Active Directory Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.10.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Cardholder Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.30.104",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Diagnostics Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "2.0.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Elevator Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Encoding Kiosk Application",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Entra ID Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "1.0.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "2.0.5",
              "status": "affected",
              "version": "2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.70.62",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Logger",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.16",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Middleware Framework",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.34",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Nexudus Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.21",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Okta Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Papercut Interface Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "SIP Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "disclosures@gallagher.com"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:gallagher:active_directory_sync:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "86C6567A-2A09-4BB9-8CB8-F805FB90C1B8",
              "versionEndExcluding": "9.10.05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:cardholder_sync_utility:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "A6D149C7-99B1-4AE7-8A55-C9E580B90C36",
              "versionEndExcluding": "9.30.104",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D465376-3887-4E00-A818-2B16D04C0A57",
              "versionEndExcluding": "9.40.2575",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:diagnostics_service:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "72E4DF3E-D733-471A-AAA6-FFA8D45D7E14",
              "versionEndExcluding": "2.0.9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:elevator_service:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "0F2740A2-A1F8-4196-AFAF-57C06953FBDF",
              "versionEndExcluding": "10.0.8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:encoding_kiosk_application:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "4D778901-4327-47EA-ACF6-ADDEFF118A20",
              "versionEndExcluding": "9.60.10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:entra_id_sync_v1:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "146602EB-32A2-4C49-8D56-1E92F9408F77",
              "versionEndExcluding": "1.0.10",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:entra_id_sync_v2:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "8173A618-EBE2-4B67-AFC3-B899D895BBE4",
              "versionEndExcluding": "2.0.5",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:event_logger:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "BE2CC85C-1091-4CCB-A446-F3181E52739C",
              "versionEndExcluding": "8.90.16",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:event_sync_utility:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "623E81B3-AE73-4322-91E1-7DD7787A785F",
              "versionEndExcluding": "8.70.62",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:middleware_framework:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "F8D655FD-6395-47B8-9D42-7FCA2CC87CD4",
              "versionEndExcluding": "8.90.34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:nexudus_integration:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "CA4AB723-E187-4CB2-8623-5DB3980DF815",
              "versionEndExcluding": "9.60.21",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:okta_sync:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "BB2734E6-EC24-432A-AC0E-1B52081977D9",
              "versionEndExcluding": "9.40.05",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:papercut_interface_integration:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "3CBA27C1-F4DB-4032-A5D6-8DC317399E17",
              "versionEndExcluding": "9.60.02",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:gallagher:sip_integration:*:*:*:*:*:command_centre:*:*",
              "matchCriteriaId": "6E28597D-298E-4935-91EB-9D30124EC64E",
              "versionEndExcluding": "10.10",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."
    },
    {
      "lang": "es",
      "value": "La inserci\u00f3n de informaci\u00f3n sensible en el archivo de registro (CWE-532) en algunos instaladores del Servicio Command Centre podr\u00eda llevar a la exposici\u00f3n de las credenciales de la cuenta de servicio.\nFactor de mitigaci\u00f3n: Solo los sitios que instalan los Servicios Command Centre con una cuenta de servicio personalizada (no la cuenta de servicio de red predeterminada) se ven potencialmente afectados.\n\nMitigaci\u00f3n: Para los sitios preocupados por la exposici\u00f3n, la acci\u00f3n recomendada es cambiar la contrase\u00f1a de la cuenta de servicio. Tambi\u00e9n pueden eliminar cualquier archivo de registro del instalador, que suelen encontrarse en %programdata%\\Gallagher\\Command Centre."
    }
  ],
  "id": "CVE-2026-25193",
  "lastModified": "2026-08-17T18:21:14.433",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "LOW",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "disclosures@gallagher.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 6.0,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-25193",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-05-26T14:24:00.870402Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-05-25T07:16:14.263",
  "references": [
    {
      "source": "disclosures@gallagher.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
    }
  ],
  "sourceIdentifier": "disclosures@gallagher.com",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ],
      "source": "disclosures@gallagher.com",
      "type": "Secondary"
    }
  ]
}

GHSA-5P63-2CWC-2X43

Vulnerability from github – Published: 2026-05-26 13:30 – Updated: 2026-08-17 18:30

Details

Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.

Severity

8.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-25193"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-532"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-05-25T07:16:14Z",
    "severity": "HIGH"
  },
  "details": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.",
  "id": "GHSA-5p63-2cwc-2x43",
  "modified": "2026-08-17T18:30:58Z",
  "published": "2026-05-26T13:30:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25193"
    },
    {
      "type": "WEB",
      "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2026-25193 (GCVE-0-2026-25193)

FKIE_CVE-2026-25193

GHSA-5P63-2CWC-2X43

Tags

Sightings

Nomenclature