CVE-2026-26053 — Gallagher / Command Centre Server

Description (CNA)

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.

Affected (CNA)

Vendor / product	Versions
Gallagher / Command Centre Server	affected 9.10; affected 9.50 before vEL9.50.1587(MR1); affected 9.40 before vEL9.40.3130(MR3); affected 9.30 before vEL9.30.3983(MR5); affected 9.20 before vEL9.20.4349(MR7)

CWE

CWE-266

References

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-26053

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.