CVE-2026-25193
High
Description
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
SeverityHigh
CVSS8.1
Exploit probability3. percentile0.1%
ProductGallagher Command Centre
PublishedMay 25, 2026
First seenMay 25, 2026
Weakness typeCWE-532CWE-532
How to fix
Update
- gallagher command_centre9.40.2575 or later
- gallagher active_directory_sync9.10.05 or later
- gallagher cardholder_sync_utility9.30.104 or later
- gallagher diagnostics_service2.0.9 or later
- gallagher elevator_service10.0.8 or later
- gallagher encoding_kiosk_application9.60.10 or later
- gallagher entra_id_sync_v11.0.10 or later
- gallagher entra_id_sync_v22.0.5 or later
- gallagher event_logger8.90.16 or later
- gallagher event_sync_utility8.70.62 or later
- gallagher middleware_framework8.90.34 or later
- gallagher nexudus_integration9.60.21 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gallagher command_centre | v < 9.40.2575 | 9.40.2575 |
| gallagher active_directory_sync | v < 9.10.05 | 9.10.05 |
| gallagher cardholder_sync_utility | v < 9.30.104 | 9.30.104 |
| gallagher diagnostics_service | v < 2.0.9 | 2.0.9 |
| gallagher elevator_service | v < 10.0.8 | 10.0.8 |
| gallagher encoding_kiosk_application | v < 9.60.10 | 9.60.10 |
| gallagher entra_id_sync_v1 | v < 1.0.10 | 1.0.10 |
| gallagher entra_id_sync_v2 | v < 2.0.5 | 2.0.5 |
| gallagher event_logger | v < 8.90.16 | 8.90.16 |
| gallagher event_sync_utility | v < 8.70.62 | 8.70.62 |
| gallagher middleware_framework | v < 8.90.34 | 8.90.34 |
| gallagher nexudus_integration | v < 9.60.21 | 9.60.21 |
| gallagher okta_sync | v < 9.40.05 | 9.40.05 |
| gallagher papercut_interface_integration | v < 9.60.02 | 9.60.02 |
| gallagher sip_integration | v < 10.10 | 10.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.