FKIE_CVE-2026-25193
Vulnerability from fkie_nvd - Published: 2026-05-25 07:16 - Updated: 2026-07-23 17:10
Severity
Summary
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.
Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.
Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
References
Impacted products
| Vendor | Product | Version |
|---|
{
"affected": [
{
"affectedData": [
{
"defaultStatus": "unaffected",
"product": "Command Centre Server",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.40.2575 (MR2)",
"status": "affected",
"version": "9.40",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Active Directory Sync",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.10.05",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Cardholder Sync Utility",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.30.104",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Diagnostics Service",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "2.0.9",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Elevator Service",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "10.0.8",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Encoding Kiosk Application",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.60.10",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "unaffected",
"product": "Entra ID Sync",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "1.0.10",
"status": "affected",
"version": "1.0",
"versionType": "custom"
},
{
"lessThan": "2.0.5",
"status": "affected",
"version": "2.0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Event Sync Utility",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "8.70.62",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Event Logger",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "8.90.16",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Middleware Framework",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "8.90.34",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Nexudus Integration",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.60.21",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Okta Sync",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.40.05",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "Papercut Interface Integration",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "9.60.02",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
},
{
"defaultStatus": "affected",
"product": "SIP Integration",
"vendor": "Gallagher",
"versions": [
{
"lessThan": "10.1.0",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
],
"source": "disclosures@gallagher.com"
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Insertion of Sensitive Information into Log File (CWE-532)\u00a0in some Command Centre Service installers could lead to Service Account credentials exposure.\u202f\nMitigating Factor:\u00a0Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation:\u00a0For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."
},
{
"lang": "es",
"value": "La inserci\u00f3n de informaci\u00f3n sensible en el archivo de registro (CWE-532) en algunos instaladores del Servicio Command Centre podr\u00eda llevar a la exposici\u00f3n de las credenciales de la cuenta de servicio.\nFactor de mitigaci\u00f3n: Solo los sitios que instalan los Servicios Command Centre con una cuenta de servicio personalizada (no la cuenta de servicio de red predeterminada) se ven potencialmente afectados.\n\nMitigaci\u00f3n: Para los sitios preocupados por la exposici\u00f3n, la acci\u00f3n recomendada es cambiar la contrase\u00f1a de la cuenta de servicio. Tambi\u00e9n pueden eliminar cualquier archivo de registro del instalador, que suelen encontrarse en %programdata%\\Gallagher\\Command Centre."
}
],
"id": "CVE-2026-25193",
"lastModified": "2026-07-23T17:10:00.123",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "LOW",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 1.5,
"impactScore": 6.0,
"source": "disclosures@gallagher.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2026-25193",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-05-26T14:24:00.870402Z",
"version": "2.0.3"
}
}
]
},
"published": "2026-05-25T07:16:14.263",
"references": [
{
"source": "disclosures@gallagher.com",
"url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"
}
],
"sourceIdentifier": "disclosures@gallagher.com",
"vulnStatus": "Awaiting Analysis",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-532"
}
],
"source": "disclosures@gallagher.com",
"type": "Secondary"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…