Vulnerability Details CVE-2026-25193
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.
Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.
Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 3.2%
CVSS Severity
CVSS v3 Score 8.1
Products affected by CVE-2026-25193
-
cpe:2.3:a:gallagher:active_directory_sync:*
-
cpe:2.3:a:gallagher:command_centre:-
-
cpe:2.3:a:gallagher:command_centre:7.70
-
cpe:2.3:a:gallagher:command_centre:7.80
-
cpe:2.3:a:gallagher:command_centre:7.80.939
-
cpe:2.3:a:gallagher:command_centre:7.80.960
-
cpe:2.3:a:gallagher:command_centre:7.90
-
cpe:2.3:a:gallagher:command_centre:7.90.0
-
cpe:2.3:a:gallagher:command_centre:7.90.1038
-
cpe:2.3:a:gallagher:command_centre:7.90.961
-
cpe:2.3:a:gallagher:command_centre:7.90.991
-
cpe:2.3:a:gallagher:command_centre:8.0
-
cpe:2.3:a:gallagher:command_centre:8.00
-
cpe:2.3:a:gallagher:command_centre:8.00.1128
-
cpe:2.3:a:gallagher:command_centre:8.00.1161
-
cpe:2.3:a:gallagher:command_centre:8.00.1228
-
cpe:2.3:a:gallagher:command_centre:8.00.1252
-
cpe:2.3:a:gallagher:command_centre:8.10
-
cpe:2.3:a:gallagher:command_centre:8.10.1092
-
cpe:2.3:a:gallagher:command_centre:8.10.1134
-
cpe:2.3:a:gallagher:command_centre:8.10.1211
-
cpe:2.3:a:gallagher:command_centre:8.10.1253
-
cpe:2.3:a:gallagher:command_centre:8.10.1284
-
cpe:2.3:a:gallagher:command_centre:8.20
-
cpe:2.3:a:gallagher:command_centre:8.20.1093
-
cpe:2.3:a:gallagher:command_centre:8.20.1166
-
cpe:2.3:a:gallagher:command_centre:8.20.1218
-
cpe:2.3:a:gallagher:command_centre:8.20.1259
-
cpe:2.3:a:gallagher:command_centre:8.30
-
cpe:2.3:a:gallagher:command_centre:8.30.1236
-
cpe:2.3:a:gallagher:command_centre:8.30.1299
-
cpe:2.3:a:gallagher:command_centre:8.30.1359
-
cpe:2.3:a:gallagher:command_centre:8.30.1470
-
cpe:2.3:a:gallagher:command_centre:8.40.1888
-
cpe:2.3:a:gallagher:command_centre:8.40.2216
-
cpe:2.3:a:gallagher:command_centre:8.50
-
cpe:2.3:a:gallagher:command_centre:8.50.2245
-
cpe:2.3:a:gallagher:command_centre:8.50.2831
-
cpe:2.3:a:gallagher:command_centre:8.60
-
cpe:2.3:a:gallagher:command_centre:8.60.1652
-
cpe:2.3:a:gallagher:command_centre:8.60.2039
-
cpe:2.3:a:gallagher:command_centre:8.60.2347
-
cpe:2.3:a:gallagher:command_centre:8.60.2550
-
cpe:2.3:a:gallagher:command_centre:8.70
-
cpe:2.3:a:gallagher:command_centre:8.70.1787
-
cpe:2.3:a:gallagher:command_centre:8.70.2185
-
cpe:2.3:a:gallagher:command_centre:8.70.2375
-
cpe:2.3:a:gallagher:command_centre:8.70.2526
-
cpe:2.3:a:gallagher:command_centre:8.80
-
cpe:2.3:a:gallagher:command_centre:8.80.1192
-
cpe:2.3:a:gallagher:command_centre:8.80.1369
-
cpe:2.3:a:gallagher:command_centre:8.80.1526
-
cpe:2.3:a:gallagher:command_centre:8.90
-
cpe:2.3:a:gallagher:command_centre:8.90.1318
-
cpe:2.3:a:gallagher:command_centre:8.90.1620
-
cpe:2.3:a:gallagher:command_centre:8.90.1751
-
cpe:2.3:a:gallagher:command_centre:9.00
-
cpe:2.3:a:gallagher:command_centre:9.00.1507
-
cpe:2.3:a:gallagher:command_centre:9.00.1774
-
cpe:2.3:a:gallagher:command_centre:9.10.1005
-
cpe:2.3:a:gallagher:command_centre:9.10.1268
-
cpe:2.3:a:gallagher:command_centre:9.10.1530
-
cpe:2.3:a:gallagher:command_centre:9.10.1682
-
cpe:2.3:a:gallagher:command_centre:9.10.2149
-
cpe:2.3:a:gallagher:command_centre:9.10.2692
-
cpe:2.3:a:gallagher:command_centre:9.10.3194
-
cpe:2.3:a:gallagher:command_centre:9.10.4135
-
cpe:2.3:a:gallagher:command_centre:9.10.4647
-
cpe:2.3:a:gallagher:command_centre:9.20.1043
-
cpe:2.3:a:gallagher:command_centre:9.20.1435
-
cpe:2.3:a:gallagher:command_centre:9.20.1827
-
cpe:2.3:a:gallagher:command_centre:9.20.2337
-
cpe:2.3:a:gallagher:command_centre:9.20.2819
-
cpe:2.3:a:gallagher:command_centre:9.20.3265
-
cpe:2.3:a:gallagher:command_centre:9.20.3783
-
cpe:2.3:a:gallagher:command_centre:9.20.4349
-
cpe:2.3:a:gallagher:command_centre:9.30.1594
-
cpe:2.3:a:gallagher:command_centre:9.30.1874
-
cpe:2.3:a:gallagher:command_centre:9.30.2482
-
cpe:2.3:a:gallagher:command_centre:9.30.2881
-
cpe:2.3:a:gallagher:command_centre:9.30.3382
-
cpe:2.3:a:gallagher:command_centre:9.30.3982
-
cpe:2.3:a:gallagher:command_centre:9.30.3983
-
cpe:2.3:a:gallagher:command_centre:9.40.1359
-
cpe:2.3:a:gallagher:command_centre:9.40.1976
-
cpe:2.3:a:gallagher:diagnostics_service:*
-
cpe:2.3:a:gallagher:elevator_service:*
-
cpe:2.3:a:gallagher:encoding_kiosk_application:*
-
cpe:2.3:a:gallagher:entra_id_sync_v1:*
-
cpe:2.3:a:gallagher:entra_id_sync_v2:*
-
cpe:2.3:a:gallagher:event_logger:*
-
cpe:2.3:a:gallagher:event_sync_utility:*
-
cpe:2.3:a:gallagher:middleware_framework:*
-
cpe:2.3:a:gallagher:nexudus_integration:*
-
cpe:2.3:a:gallagher:okta_sync:*
-
cpe:2.3:a:gallagher:papercut_interface_integration:*
-
cpe:2.3:a:gallagher:sip_integration:*