Vulnerability-Lookup

CVE-2026-25193 (GCVE-0-2026-25193)

Vulnerability from cvelistv5 – Published: 2026-05-25 05:28 – Updated: 2026-05-26 14:24

Summary

Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.

Severity

8.1 (High)


                        
                          CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator (v2.0.3)

CWE

CWE-532 - Insertion of sensitive information into log file

Assigner

Gallagher

References

1 reference

URL	Tags
https://security.gallagher.com/en-NZ/Security-Adv…

Impacted products

14 products

Vendor	Product	Version
Gallagher	Command Centre Server	Affected: 9.40 , < 9.40.2575 (MR2) (custom)
Gallagher	Active Directory Sync	Affected: 0 , < 9.10.05 (custom)
Gallagher	Cardholder Sync Utility	Affected: 0 , < 9.30.104 (custom)
Gallagher	Diagnostics Service	Affected: 0 , < 2.0.9 (custom)
Gallagher	Elevator Service	Affected: 0 , < 10.0.8 (custom)
Gallagher	Encoding Kiosk Application	Affected: 0 , < 9.60.10 (custom)
Gallagher	Entra ID Sync	Affected: 1.0 , < 1.0.10 (custom) Affected: 2.0 , < 2.0.5 (custom)
Gallagher	Event Sync Utility	Affected: 0 , < 8.70.62 (custom)
Gallagher	Event Logger	Affected: 0 , < 8.90.16 (custom)
Gallagher	Middleware Framework	Affected: 0 , < 8.90.34 (custom)
Gallagher	Nexudus Integration	Affected: 0 , < 9.60.21 (custom)
Gallagher	Okta Sync	Affected: 0 , < 9.40.05 (custom)
Gallagher	Papercut Interface Integration	Affected: 0 , < 9.60.02 (custom)
Gallagher	SIP Integration	Affected: 0 , < 10.1.0 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-25193",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-05-26T14:24:00.870402Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-05-26T14:24:08.348Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Command Centre Server",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.2575 (MR2)",
              "status": "affected",
              "version": "9.40",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Active Directory Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.10.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Cardholder Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.30.104",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Diagnostics Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "2.0.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Elevator Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Encoding Kiosk Application",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Entra ID Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "1.0.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "2.0.5",
              "status": "affected",
              "version": "2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.70.62",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Logger",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.16",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Middleware Framework",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.34",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Nexudus Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.21",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Okta Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Papercut Interface Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "SIP Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eInsertion of Sensitive Information into Log File (CWE-532)\u0026nbsp;in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\u003cbr\u003e\u003cb\u003eMitigating Factor:\u003c/b\u003e\u0026nbsp;Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\u003c/p\u003e\u003cdiv\u003e\u003cb\u003eMitigation:\u0026nbsp;\u003c/b\u003eFor sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.\u003c/div\u003e"
            }
          ],
          "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "LOW",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-532",
              "description": "CWE-532 Insertion of sensitive information into log file",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-05-25T05:28:14.766Z",
        "orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc",
        "shortName": "Gallagher"
      },
      "references": [
        {
          "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
        }
      ],
      "source": {
        "discovery": "INTERNAL"
      },
      "x_generator": {
        "engine": "Vulnogram 1.0.2"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc",
    "assignerShortName": "Gallagher",
    "cveId": "CVE-2026-25193",
    "datePublished": "2026-05-25T05:28:14.766Z",
    "dateReserved": "2026-03-01T23:45:09.705Z",
    "dateUpdated": "2026-05-26T14:24:08.348Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-25193",
      "date": "2026-07-31",
      "epss": "0.00132",
      "percentile": "0.03164"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-25193\",\"sourceIdentifier\":\"disclosures@gallagher.com\",\"published\":\"2026-05-25T07:16:14.263\",\"lastModified\":\"2026-07-23T17:10:00.123\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\\n\\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\\\Gallagher\\\\Command Centre.\"},{\"lang\":\"es\",\"value\":\"La inserci\u00f3n de informaci\u00f3n sensible en el archivo de registro (CWE-532) en algunos instaladores del Servicio Command Centre podr\u00eda llevar a la exposici\u00f3n de las credenciales de la cuenta de servicio.\\nFactor de mitigaci\u00f3n: Solo los sitios que instalan los Servicios Command Centre con una cuenta de servicio personalizada (no la cuenta de servicio de red predeterminada) se ven potencialmente afectados.\\n\\nMitigaci\u00f3n: Para los sitios preocupados por la exposici\u00f3n, la acci\u00f3n recomendada es cambiar la contrase\u00f1a de la cuenta de servicio. Tambi\u00e9n pueden eliminar cualquier archivo de registro del instalador, que suelen encontrarse en %programdata%\\\\Gallagher\\\\Command Centre.\"}],\"affected\":[{\"source\":\"disclosures@gallagher.com\",\"affectedData\":[{\"vendor\":\"Gallagher\",\"product\":\"Command Centre Server\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"9.40\",\"lessThan\":\"9.40.2575 (MR2)\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Active Directory Sync\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.10.05\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Cardholder Sync Utility\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.30.104\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Diagnostics Service\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"2.0.9\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Elevator Service\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"10.0.8\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Encoding Kiosk Application\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.60.10\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Entra ID Sync\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"1.0\",\"lessThan\":\"1.0.10\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"2.0\",\"lessThan\":\"2.0.5\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Event Sync Utility\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"8.70.62\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Event Logger\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"8.90.16\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Middleware Framework\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"8.90.34\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Nexudus Integration\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.60.21\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Okta Sync\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.40.05\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"Papercut Interface Integration\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"9.60.02\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Gallagher\",\"product\":\"SIP Integration\",\"defaultStatus\":\"affected\",\"versions\":[{\"version\":\"0\",\"lessThan\":\"10.1.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"disclosures@gallagher.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":1.5,\"impactScore\":6.0}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-05-26T14:24:00.870402Z\",\"id\":\"CVE-2026-25193\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"disclosures@gallagher.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-532\"}]}],\"references\":[{\"url\":\"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193\",\"source\":\"disclosures@gallagher.com\"}]}}",
    "redhat_vex": {
      "current_release_date": "2026-05-26T20:13:55+00:00",
      "cve": "CVE-2026-25193",
      "id": "CVE-2026-25193",
      "initial_release_date": "2026-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "CVE-2026-25193",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-25193.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-25193\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-05-26T14:24:00.870402Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-05-26T14:24:05.451Z\"}}], \"cna\": {\"source\": {\"discovery\": \"INTERNAL\"}, \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"CHANGED\", \"version\": \"3.1\", \"baseScore\": 8.1, \"attackVector\": \"LOCAL\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"REQUIRED\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"LOW\", \"confidentialityImpact\": \"LOW\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Gallagher\", \"product\": \"Command Centre Server\", \"versions\": [{\"status\": \"affected\", \"version\": \"9.40\", \"lessThan\": \"9.40.2575 (MR2)\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Active Directory Sync\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.10.05\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Cardholder Sync Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.30.104\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Diagnostics Service\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"2.0.9\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Elevator Service\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"10.0.8\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Encoding Kiosk Application\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.60.10\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Entra ID Sync\", \"versions\": [{\"status\": \"affected\", \"version\": \"1.0\", \"lessThan\": \"1.0.10\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"2.0\", \"lessThan\": \"2.0.5\", \"versionType\": \"custom\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Event Sync Utility\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.70.62\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Event Logger\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.90.16\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Middleware Framework\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"8.90.34\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Nexudus Integration\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.60.21\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Okta Sync\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.40.05\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"Papercut Interface Integration\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"9.60.02\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}, {\"vendor\": \"Gallagher\", \"product\": \"SIP Integration\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"10.1.0\", \"versionType\": \"custom\"}], \"defaultStatus\": \"affected\"}], \"references\": [{\"url\": \"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193\"}], \"x_generator\": {\"engine\": \"Vulnogram 1.0.2\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"Insertion of Sensitive Information into Log File (CWE-532)\\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\\u202f\\nMitigating Factor:\\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\\n\\nMitigation:\\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\\\Gallagher\\\\Command Centre.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eInsertion of Sensitive Information into Log File (CWE-532)\u0026nbsp;in some Command Centre Service installers could lead to Service Account credentials exposure.\\u202f\u003cbr\u003e\u003cb\u003eMitigating Factor:\u003c/b\u003e\u0026nbsp;Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\u003c/p\u003e\u003cdiv\u003e\u003cb\u003eMitigation:\u0026nbsp;\u003c/b\u003eFor sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\\\Gallagher\\\\Command Centre.\u003c/div\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-532\", \"description\": \"CWE-532 Insertion of sensitive information into log file\"}]}], \"providerMetadata\": {\"orgId\": \"0c426f27-3ee1-4eff-be88-288d5a1822bc\", \"shortName\": \"Gallagher\", \"dateUpdated\": \"2026-05-25T05:28:14.766Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2026-25193\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-05-26T14:24:08.348Z\", \"dateReserved\": \"2026-03-01T23:45:09.705Z\", \"assignerOrgId\": \"0c426f27-3ee1-4eff-be88-288d5a1822bc\", \"datePublished\": \"2026-05-25T05:28:14.766Z\", \"assignerShortName\": \"Gallagher\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2026-25193

Vulnerability from fkie_nvd - Published: 2026-05-25 07:16 - Updated: 2026-06-17 10:24

Severity

8.1 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Summary

References

	URL	Tags
	disclosures@gallagher.com	https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193

Impacted products

	Vendor	Product	Version

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Command Centre Server",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.2575 (MR2)",
              "status": "affected",
              "version": "9.40",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Active Directory Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.10.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Cardholder Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.30.104",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Diagnostics Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "2.0.9",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Elevator Service",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.0.8",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Encoding Kiosk Application",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.10",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "Entra ID Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "1.0.10",
              "status": "affected",
              "version": "1.0",
              "versionType": "custom"
            },
            {
              "lessThan": "2.0.5",
              "status": "affected",
              "version": "2.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Sync Utility",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.70.62",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Event Logger",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.16",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Middleware Framework",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "8.90.34",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Nexudus Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.21",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Okta Sync",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.40.05",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Papercut Interface Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "9.60.02",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "SIP Integration",
          "vendor": "Gallagher",
          "versions": [
            {
              "lessThan": "10.1.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "source": "disclosures@gallagher.com"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."
    }
  ],
  "id": "CVE-2026-25193",
  "lastModified": "2026-06-17T10:24:17.233",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "LOCAL",
          "availabilityImpact": "HIGH",
          "baseScore": 8.1,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "LOW",
          "integrityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 6.0,
        "source": "disclosures@gallagher.com",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2026-25193",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2026-05-26T14:24:00.870402Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2026-05-25T07:16:14.263",
  "references": [
    {
      "source": "disclosures@gallagher.com",
      "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
    }
  ],
  "sourceIdentifier": "disclosures@gallagher.com",
  "vulnStatus": "Awaiting Analysis",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-532"
        }
      ],
      "source": "disclosures@gallagher.com",
      "type": "Secondary"
    }
  ]
}

GHSA-5P63-2CWC-2X43

Vulnerability from github – Published: 2026-05-26 13:30 – Updated: 2026-05-26 13:30

Details

Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.

Severity

8.1 (High)


                  
                    CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2026-25193"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-532"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2026-05-25T07:16:14Z",
    "severity": "HIGH"
  },
  "details": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.",
  "id": "GHSA-5p63-2cwc-2x43",
  "modified": "2026-05-26T13:30:39Z",
  "published": "2026-05-26T13:30:39Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25193"
    },
    {
      "type": "WEB",
      "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
      "type": "CVSS_V3"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2026-25193 (GCVE-0-2026-25193)

FKIE_CVE-2026-25193

GHSA-5P63-2CWC-2X43

Tags

Sightings

Nomenclature