CVE-2026-26053mediumCWE-266

CVE-2026-26053: medium-severity vulnerability in Gallagher Command Centre Server

Published

Follow this CVE+ Monitor Command Centre Server

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 0.2%
An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Affected products
Gallagher · Command Centre Server
Related CVEs — Gallagher Command Centre Server

In the same product, most dangerous first.

CVE-2024-43690HIGHCVE-2024-43690EPSS 0.6%CVE-2023-23584MEDIUMCVE-2023-23584EPSS 0.5%CVE-2025-47699CRITICALCVE-2025-47699EPSS 0.3%CVE-2024-21815CRITICALCVE-2024-21815EPSS 0.3%CVE-2024-42407HIGHCVE-2024-42407EPSS 0.3%CVE-2024-21838MEDIUMCVE-2024-21838EPSS 0.3%