CVE-2026-26053

CVSS Score & Metrics

Base Score

5.3 / 10

Vector String

                                        CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N                                    

Vulnerability Description

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.

Vulnerability Details

Published Date

July 07, 2026

Last Modified

July 07, 2026

CWE ID

CWE-266

Source

NVD

Vendor

Gallagher

Product

Command Centre Server

External References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-26053

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment