VULNERABILITY INTELLIGENCE

CVE-2026-20801

CVSS score5.6 MEDIUM
EPSS probability0.12%
CISA KEVNot currently listed
Published2026-03-03
Last modified2026-08-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Description

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

Weakness classification

  • disclosures@gallagher.com: CWE-319

Primary references