CVE-2026-20801

CVSS Score & Metrics

Base Score

5.6 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L                                    

Vulnerability Description

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams.

This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

Vulnerability Details

Published Date

March 03, 2026

Last Modified

March 03, 2026

CWE ID

CWE-319

Source

NVD

Vendor

Gallagher

Product

NxWitness VMS and Hanwha VMS Integrations

External References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment