CVE-2026-27790

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-27790
Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected: * 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1)) * 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3)) * 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5)) * 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7)) * all versions of 9.10 and prior.

2.7 /10

CVSS v3 : LOW

V3 Legend

Vector :

Exploitability : 1.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-27790 Vendor Advisory
Configurations

Configuration 1 (hide)

AND
OR cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:*
OR cpe:2.3:h:gallagher:high_sec_t20_reader:-:*:*:*:*:*:*:*
cpe:2.3:h:gallagher:high_sec_t20_reader_multi_tech:-:*:*:*:*:*:*:*
cpe:2.3:h:gallagher:t20_alarms_terminal:-:*:*:*:*:*:*:*
cpe:2.3:h:gallagher:t20_mifare_terminal:-:*:*:*:*:*:*:*
cpe:2.3:h:gallagher:t20_multi_tech_terminal:-:*:*:*:*:*:*:*
History

25 Oct 2026, 20:10

Type Values Removed Values Added
Summary
  • (es) Excepción no capturada (CWE-248) en los Lectores T20 permite a un operador autenticado y autorizado activar un reinicio enviando solicitudes específicas, lo que resulta en una denegación de servicio temporal. Versión de Command Centre afectada: * 9.50 anterior a vCR9.50.260616a (distribuida en 9.50.1587(MR1)) * 9.40 anterior a vCR9.40.260616a (distribuida en 9.40.3130(MR3)) * 9.30 anterior a vCR9.30.260616a (distribuida en 9.30.3983(MR5)) * 9.20 anterior a vCR9.20.260616a (distribuida en 9.20.4349(MR7)) * todas las versiones de 9.10 y anteriores.
Information

Published : 2026-07-07 05:16

Updated : 2026-10-25 20:10

NVD link : CVE-2026-27790

Mitre link : CVE-2026-27790

CVE.ORG link : CVE-2026-27790

JSON object : View

Products Affected

gallagher

  • t20_mifare_terminal
  • high_sec_t20_reader_multi_tech
  • high_sec_t20_reader
  • t20_alarms_terminal
  • t20_multi_tech_terminal
  • command_centre
CWE
CWE-248

Uncaught Exception