Vendor

    Gallagher

    75 known vulnerabilities in products by Gallagher, 0 of them actively exploited (CISA KEV).

    Key figures

    75

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gallagher
    HighCVE-2020-16103

    Gallagher Command Centre: Incorrect Type Conversion or Cast

    		8.8
    CriticalCVE-2019-15294

    Gallagher Command Centre: security vulnerability

    		9.8
    CriticalCVE-2020-16098

    Gallagher Command Centre: Improper Authentication

    		9.8
    CriticalCVE-2021-23140

    Gallagher Command Centre: Improper Authorization

    		9.9
    CriticalCVE-2020-16096

    Gallagher Command Centre: Improper Authorization

    		9.9
    CriticalCVE-2021-23230

    Gallagher Command Centre: SQL Injection

    		9.9
    HighCVE-2020-16101

    Gallagher Command Centre: Buffer Access with Incorrect Length Value

    		7.5
    HighCVE-2020-16100

    Gallagher Command Centre: Improper Resource Shutdown or Release

    		7.5
    HighCVE-2020-16104

    Gallagher Command Centre: SQL Injection

    		8.2
    HighCVE-2020-16102

    Gallagher Command Centre: Improper Authentication

    		7.1
    HighCVE-2021-23205

    Gallagher Command Centre: Improper Encoding or Escaping of Output

    		8.1
    HighCVE-2022-26078

    Gallagher Controller 6000: Improper Check for Unusual or Exceptional Conditions

    		7.5
    CriticalCVE-2025-47699

    Gallagher Command Centre Server: Exposure of Sensitive System Information to an Unauthorized Control Sphere

    		9.9
    HighCVE-2024-43690

    Gallagher Command Centre Server: Inclusion of Functionality from Untrusted Control Sphere

    		8.0
    HighCVE-2021-23146

    Gallagher Command Center: Incomplete Comparison with Missing Factors

    		7.1
    HighCVE-2021-23193

    Gallagher Command Centre: Exposure of Sensitive Information to an Unauthorized Actor

    		8.1
    HighCVE-2021-23204

    Gallagher Command Centre: Exposure of Sensitive Information to an Unauthorized Actor

    		8.1
    HighCVE-2023-24590

    Gallagher Controller 6000: Use of Externally-Controlled Format String

    		7.5
    CriticalCVE-2021-23155

    Gallagher Command Centre Mobile Client for Android: Improper Following of a Certificate's Chain of Trust

    		9.0
    HighCVE-2026-25193

    Gallagher Command Centre Server: Insertion of Sensitive Information into Log File

    		8.1
    MediumCVE-2019-19802

    Gallagher Command Centre: security vulnerability

    		6.5
    MediumCVE-2019-12492

    Gallagher Command Centre: Information Disclosure

    		6.5
    CriticalCVE-2024-21815

    Gallagher Command Centre Server: Insufficiently Protected Credentials

    		9.1
    HighCVE-2023-22363

    Access Zone stack overflow

    		6.5
    CriticalCVE-2023-24584

    Controller 6000 buffer overflow via upload feature in web interface

    		7.5

    All vulnerabilities in search

    Products

    Products by Gallagher
    Gallagher Command Centre680
    Command Centre Server160
    Controller 6000 And Controller 700070
    Controller 6000 Firmware50
    Controller 600030
    Controller 700030