CVEvulnerability

CVE-2026-26053

5.3 MEDIUM Published 2026-07-07 Modified 2026-10-25 Official page ↗
Status
Analyzed
Published
2026-07-07
Last modified
2026-10-25
Assigner
[email protected]
CVSS 3.1 ([email protected])
5.3 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
Weaknesses
CWE-266

Description

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.

Affected configurations

• gallagher command centre (< 9.20.4349) • gallagher command centre (>= 9.30.1594 < 9.30.3983) • gallagher command centre (>= 9.40.1359 < 9.40.3130) • gallagher command centre (>= 9.50.978 < 9.50.1587)

Related

Weakness · CWE (1)

  • CWE-266 Incorrect Privilege Assignment weakness

References