Version of Command Centre affected:
* 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1))
* 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3))
* 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5))
* 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7))
* all versions of 9.10 and prior.
Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| Gallagher | Controller 7000 and 6000 | unaffected |
|
Configuration 1 [-]
| AND |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
Fri, 14 Aug 2026 19:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Gallagher
Gallagher command Centre Gallagher controller 6000 Gallagher controller 7000 Gallagher controller 7000 Enhanced Gallagher controller 7000 High Security Gallagher controller 7000 Single Door Gallagher controller 7000 Two Door |
|
| CPEs | cpe:2.3:a:gallagher:command_centre:*:*:*:*:*:*:*:* cpe:2.3:h:gallagher:controller_6000:-:*:*:*:*:*:*:* cpe:2.3:h:gallagher:controller_7000:-:*:*:*:*:*:*:* cpe:2.3:h:gallagher:controller_7000_enhanced:-:*:*:*:*:*:*:* cpe:2.3:h:gallagher:controller_7000_high_security:-:*:*:*:*:*:*:* cpe:2.3:h:gallagher:controller_7000_single_door:-:*:*:*:*:*:*:* cpe:2.3:h:gallagher:controller_7000_two_door:-:*:*:*:*:*:*:* |
|
| Vendors & Products |
Gallagher
Gallagher command Centre Gallagher controller 6000 Gallagher controller 7000 Gallagher controller 7000 Enhanced Gallagher controller 7000 High Security Gallagher controller 7000 Single Door Gallagher controller 7000 Two Door |
Sat, 01 Aug 2026 18:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception in Controller Diagnostic Interface Allows Authorized Operator to Trigger Reboot, Resulting in Temporary Denial of Service |
Wed, 29 Jul 2026 16:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception Triggering Controller Restart in Gallagher Controller Diagnostics |
Sun, 26 Jul 2026 20:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception Triggering Controller Restart in Gallagher Controller Diagnostics |
Wed, 22 Jul 2026 12:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception Allows Operator to Trigger Controller Restart Resulting in Denial of Service |
Thu, 16 Jul 2026 23:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception Allows Operator to Trigger Controller Restart Resulting in Denial of Service |
Mon, 13 Jul 2026 22:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated Operator Can Restart Gallagher Controller Causing Temporary Denial of Service |
Sun, 12 Jul 2026 08:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated Operator Can Restart Gallagher Controller Causing Temporary Denial of Service |
Sat, 11 Jul 2026 05:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Controller Diagnostic Interface Restart Denial of Service |
Fri, 10 Jul 2026 02:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Controller Diagnostic Interface Restart Denial of Service |
Thu, 09 Jul 2026 11:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception in Diagnostic Web Interface Allows Controller Restart (Denial of Service) |
Wed, 08 Jul 2026 16:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Uncaught Exception in Diagnostic Web Interface Allows Controller Restart (Denial of Service) |
Wed, 08 Jul 2026 09:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated Operator Can Trigger Controller Restart Causing Temporary Denial of Service |
Tue, 07 Jul 2026 17:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Authenticated Operator Can Trigger Controller Restart Causing Temporary Denial of Service |
Tue, 07 Jul 2026 14:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Metrics |
ssvc
|
Tue, 07 Jul 2026 05:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a Controller restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected: * 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1)) * 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3)) * 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5)) * 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7)) * all versions of 9.10 and prior. | |
| Weaknesses | CWE-248 | |
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: Gallagher
Published:
Updated: 2026-07-07T13:36:54.335Z
Reserved: 2026-03-01T23:45:09.678Z
Link: CVE-2026-27844
Vulnrichment
Updated: 2026-07-07T13:36:50.650Z
NVD
Status : Analyzed
Published: 2026-07-07T05:16:50.617
Modified: 2026-08-14T18:51:18.270
Link: CVE-2026-27844
Redhat
No data.
OpenCVE Enrichment
Updated: 2026-08-01T18:00:12Z
-
CWE-248
Uncaught Exception