Improper Locking in Gallagher Command Centre Server Vulnerability
CVE-2026-20757

2.5LOW

Key Information:

Vendor

Gallagher

Status
Command Centre Server
Vendor
CVE Published:
3 March 2026

What is CVE-2026-20757?

An improper locking vulnerability in Gallagher's Command Centre Server enables a privileged operator to trigger a limited denial-of-service. This flaw affects multiple versions of the software, potentially allowing unauthorized access and disruption of services within the system. Administrators are advised to apply updates to secure their installations against this threat.

Affected Version(s)

Command Centre Server 0 <= 9.00

Command Centre Server 0 <= 9.00

Command Centre Server 9.40 < 9.40.1976(MR1)

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
2.5
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.