Dashboard / CVE-2026-26053

CVE-2026-26053

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 51/100
Published: 2026-07-07 Modified: 2026-10-25 First seen: 2026-10-29 Status: active

Attack Surface

Network No Interaction Integ. Impact

CVSS Vector Breakdown

AV: Network
AC: High
PR: Low
UI: None
S: Unchanged
C: None
I: High
A: None

Description

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
gallagher command_centre < 9.20.4349

References & Advisories (1)

Bug Bounty Relevance

51 / 100
✓ Network accessible
✓ No user interaction

CVSS Score

5.3 / 10.0 v3.1
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

EPSS — Exploitation Probability

0.25%
Raw Score 0.002470
Percentile 16.0%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00247
2026-10-28
0.00247

Intelligence Sources

nvd ref →

External Links