Cleartext Transmission Vulnerability in Gallagher Video Management Systems
CVE-2026-20801

5.6MEDIUM

Key Information:

Vendor

Gallagher

Status
Nxwitness Vms And Hanwha Vms Integrations
Vendor
CVE Published:
3 March 2026

What is CVE-2026-20801?

A vulnerability exists in the Gallagher NxWitness and Hanwha Video Management Systems (VMS) integrations that enables unprivileged users with local network access to intercept and view live video streams. This issue stems from the cleartext transmission of sensitive information, posing a significant risk to the integrity and confidentiality of video data. Organizations utilizing these integrations should apply updates to their systems to mitigate this risk.

Affected Version(s)

NxWitness VMS and Hanwha VMS Integrations 0

NxWitness VMS and Hanwha VMS Integrations 0 < 9.10.017

NxWitness VMS and Hanwha VMS Integrations 0 < 9.10.025

References

https://security.gallagher.com/en-NZ/Security-Advisories/...

CVSS V3.1

Score:
5.6
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.