CVE-2026-25193

{"id": "CVE-2026-25193", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-25193", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-05-26T14:24:00.870402Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "disclosures@gallagher.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 6.0, "exploitabilityScore": 1.5}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.6, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 1.8}]}, "affected": [{"source": "disclosures@gallagher.com", "affectedData": [{"vendor": "Gallagher", "product": "Command Centre Server", "versions": [{"status": "affected", "version": "9.40", "lessThan": "9.40.2575 (MR2)", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Gallagher", "product": "Active Directory Sync", "versions": [{"status": "affected", "version": "0", "lessThan": "9.10.05", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Cardholder Sync Utility", "versions": [{"status": "affected", "version": "0", "lessThan": "9.30.104", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Diagnostics Service", "versions": [{"status": "affected", "version": "0", "lessThan": "2.0.9", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Elevator Service", "versions": [{"status": "affected", "version": "0", "lessThan": "10.0.8", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Encoding Kiosk Application", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.10", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Entra ID Sync", "versions": [{"status": "affected", "version": "1.0", "lessThan": "1.0.10", "versionType": "custom"}, {"status": "affected", "version": "2.0", "lessThan": "2.0.5", "versionType": "custom"}], "defaultStatus": "unaffected"}, {"vendor": "Gallagher", "product": "Event Sync Utility", "versions": [{"status": "affected", "version": "0", "lessThan": "8.70.62", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Event Logger", "versions": [{"status": "affected", "version": "0", "lessThan": "8.90.16", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Middleware Framework", "versions": [{"status": "affected", "version": "0", "lessThan": "8.90.34", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Nexudus Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.21", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Okta Sync", "versions": [{"status": "affected", "version": "0", "lessThan": "9.40.05", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "Papercut Interface Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "9.60.02", "versionType": "custom"}], "defaultStatus": "affected"}, {"vendor": "Gallagher", "product": "SIP Integration", "versions": [{"status": "affected", "version": "0", "lessThan": "10.1.0", "versionType": "custom"}], "defaultStatus": "affected"}]}], "published": "2026-05-25T07:16:14.263", "references": [{"url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193", "tags": ["Vendor Advisory"], "source": "disclosures@gallagher.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosures@gallagher.com", "description": [{"lang": "en", "value": "CWE-532"}]}], "descriptions": [{"lang": "en", "value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."}, {"lang": "es", "value": "La inserci\u00f3n de informaci\u00f3n sensible en el archivo de registro (CWE-532) en algunos instaladores del Servicio Command Centre podr\u00eda llevar a la exposici\u00f3n de las credenciales de la cuenta de servicio.\nFactor de mitigaci\u00f3n: Solo los sitios que instalan los Servicios Command Centre con una cuenta de servicio personalizada (no la cuenta de servicio de red predeterminada) se ven potencialmente afectados.\n\nMitigaci\u00f3n: Para los sitios preocupados por la exposici\u00f3n, la acci\u00f3n recomendada es cambiar la contrase\u00f1a de la cuenta de servicio. Tambi\u00e9n pueden eliminar cualquier archivo de registro del instalador, que suelen encontrarse en %programdata%\\Gallagher\\Command Centre."}], "lastModified": "2026-08-17T18:21:14.433", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:gallagher:active_directory_sync:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "86C6567A-2A09-4BB9-8CB8-F805FB90C1B8", "versionEndExcluding": "9.10.05"}, {"criteria": "cpe:2.3:a:gallagher:cardholder_sync_utility:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "A6D149C7-99B1-4AE7-8A55-C9E580B90C36", "versionEndExcluding": "9.30.104"}, {"criteria": "cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2D465376-3887-4E00-A818-2B16D04C0A57", "versionEndExcluding": "9.40.2575"}, {"criteria": "cpe:2.3:a:gallagher:diagnostics_service:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "72E4DF3E-D733-471A-AAA6-FFA8D45D7E14", "versionEndExcluding": "2.0.9"}, {"criteria": "cpe:2.3:a:gallagher:elevator_service:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "0F2740A2-A1F8-4196-AFAF-57C06953FBDF", "versionEndExcluding": "10.0.8"}, {"criteria": "cpe:2.3:a:gallagher:encoding_kiosk_application:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "4D778901-4327-47EA-ACF6-ADDEFF118A20", "versionEndExcluding": "9.60.10"}, {"criteria": "cpe:2.3:a:gallagher:entra_id_sync_v1:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "146602EB-32A2-4C49-8D56-1E92F9408F77", "versionEndExcluding": "1.0.10"}, {"criteria": "cpe:2.3:a:gallagher:entra_id_sync_v2:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "8173A618-EBE2-4B67-AFC3-B899D895BBE4", "versionEndExcluding": "2.0.5"}, {"criteria": "cpe:2.3:a:gallagher:event_logger:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "BE2CC85C-1091-4CCB-A446-F3181E52739C", "versionEndExcluding": "8.90.16"}, {"criteria": "cpe:2.3:a:gallagher:event_sync_utility:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "623E81B3-AE73-4322-91E1-7DD7787A785F", "versionEndExcluding": "8.70.62"}, {"criteria": "cpe:2.3:a:gallagher:middleware_framework:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "F8D655FD-6395-47B8-9D42-7FCA2CC87CD4", "versionEndExcluding": "8.90.34"}, {"criteria": "cpe:2.3:a:gallagher:nexudus_integration:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "CA4AB723-E187-4CB2-8623-5DB3980DF815", "versionEndExcluding": "9.60.21"}, {"criteria": "cpe:2.3:a:gallagher:okta_sync:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "BB2734E6-EC24-432A-AC0E-1B52081977D9", "versionEndExcluding": "9.40.05"}, {"criteria": "cpe:2.3:a:gallagher:papercut_interface_integration:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "3CBA27C1-F4DB-4032-A5D6-8DC317399E17", "versionEndExcluding": "9.60.02"}, {"criteria": "cpe:2.3:a:gallagher:sip_integration:*:*:*:*:*:command_centre:*:*", "vulnerable": true, "matchCriteriaId": "6E28597D-298E-4935-91EB-9D30124EC64E", "versionEndExcluding": "10.10"}], "operator": "OR"}]}], "sourceIdentifier": "disclosures@gallagher.com"}