Vulnerability Details CVE-2026-27790
Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected:
* 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1))
* 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3))
* 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5))
* 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7))
* all versions of 9.10 and prior.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 13.7%
CVSS Severity
CVSS v3 Score 2.7
Products affected by CVE-2026-27790
-
cpe:2.3:a:gallagher:command_centre:-
-
cpe:2.3:a:gallagher:command_centre:7.70
-
cpe:2.3:a:gallagher:command_centre:7.80
-
cpe:2.3:a:gallagher:command_centre:7.80.939
-
cpe:2.3:a:gallagher:command_centre:7.80.960
-
cpe:2.3:a:gallagher:command_centre:7.90
-
cpe:2.3:a:gallagher:command_centre:7.90.0
-
cpe:2.3:a:gallagher:command_centre:7.90.1038
-
cpe:2.3:a:gallagher:command_centre:7.90.961
-
cpe:2.3:a:gallagher:command_centre:7.90.991
-
cpe:2.3:a:gallagher:command_centre:8.0
-
cpe:2.3:a:gallagher:command_centre:8.00
-
cpe:2.3:a:gallagher:command_centre:8.00.1128
-
cpe:2.3:a:gallagher:command_centre:8.00.1161
-
cpe:2.3:a:gallagher:command_centre:8.00.1228
-
cpe:2.3:a:gallagher:command_centre:8.00.1252
-
cpe:2.3:a:gallagher:command_centre:8.10
-
cpe:2.3:a:gallagher:command_centre:8.10.1092
-
cpe:2.3:a:gallagher:command_centre:8.10.1134
-
cpe:2.3:a:gallagher:command_centre:8.10.1211
-
cpe:2.3:a:gallagher:command_centre:8.10.1253
-
cpe:2.3:a:gallagher:command_centre:8.10.1284
-
cpe:2.3:a:gallagher:command_centre:8.20
-
cpe:2.3:a:gallagher:command_centre:8.20.1093
-
cpe:2.3:a:gallagher:command_centre:8.20.1166
-
cpe:2.3:a:gallagher:command_centre:8.20.1218
-
cpe:2.3:a:gallagher:command_centre:8.20.1259
-
cpe:2.3:a:gallagher:command_centre:8.30
-
cpe:2.3:a:gallagher:command_centre:8.30.1236
-
cpe:2.3:a:gallagher:command_centre:8.30.1299
-
cpe:2.3:a:gallagher:command_centre:8.30.1359
-
cpe:2.3:a:gallagher:command_centre:8.30.1470
-
cpe:2.3:a:gallagher:command_centre:8.40.1888
-
cpe:2.3:a:gallagher:command_centre:8.40.2216
-
cpe:2.3:a:gallagher:command_centre:8.50
-
cpe:2.3:a:gallagher:command_centre:8.50.2245
-
cpe:2.3:a:gallagher:command_centre:8.50.2831
-
cpe:2.3:a:gallagher:command_centre:8.60
-
cpe:2.3:a:gallagher:command_centre:8.60.1652
-
cpe:2.3:a:gallagher:command_centre:8.60.2039
-
cpe:2.3:a:gallagher:command_centre:8.60.2347
-
cpe:2.3:a:gallagher:command_centre:8.60.2550
-
cpe:2.3:a:gallagher:command_centre:8.70
-
cpe:2.3:a:gallagher:command_centre:8.70.1787
-
cpe:2.3:a:gallagher:command_centre:8.70.2185
-
cpe:2.3:a:gallagher:command_centre:8.70.2375
-
cpe:2.3:a:gallagher:command_centre:8.70.2526
-
cpe:2.3:a:gallagher:command_centre:8.80
-
cpe:2.3:a:gallagher:command_centre:8.80.1192
-
cpe:2.3:a:gallagher:command_centre:8.80.1369
-
cpe:2.3:a:gallagher:command_centre:8.80.1526
-
cpe:2.3:a:gallagher:command_centre:8.90
-
cpe:2.3:a:gallagher:command_centre:8.90.1318
-
cpe:2.3:a:gallagher:command_centre:8.90.1620
-
cpe:2.3:a:gallagher:command_centre:8.90.1751
-
cpe:2.3:a:gallagher:command_centre:9.00
-
cpe:2.3:a:gallagher:command_centre:9.00.1507
-
cpe:2.3:a:gallagher:command_centre:9.00.1774
-
cpe:2.3:a:gallagher:command_centre:9.10.1005
-
cpe:2.3:a:gallagher:command_centre:9.10.1268
-
cpe:2.3:a:gallagher:command_centre:9.10.1530
-
cpe:2.3:a:gallagher:command_centre:9.10.1682
-
cpe:2.3:a:gallagher:command_centre:9.10.2149
-
cpe:2.3:a:gallagher:command_centre:9.10.2692
-
cpe:2.3:a:gallagher:command_centre:9.10.3194
-
cpe:2.3:a:gallagher:command_centre:9.10.4135
-
cpe:2.3:a:gallagher:command_centre:9.10.4647
-
cpe:2.3:a:gallagher:command_centre:9.20.1043
-
cpe:2.3:a:gallagher:command_centre:9.20.1435
-
cpe:2.3:a:gallagher:command_centre:9.20.1827
-
cpe:2.3:a:gallagher:command_centre:9.20.2337
-
cpe:2.3:a:gallagher:command_centre:9.20.2819
-
cpe:2.3:a:gallagher:command_centre:9.20.3265
-
cpe:2.3:a:gallagher:command_centre:9.20.3783
-
cpe:2.3:a:gallagher:command_centre:9.30.1594
-
cpe:2.3:a:gallagher:command_centre:9.30.1874
-
cpe:2.3:a:gallagher:command_centre:9.30.2482
-
cpe:2.3:a:gallagher:command_centre:9.30.2881
-
cpe:2.3:a:gallagher:command_centre:9.30.3382
-
cpe:2.3:a:gallagher:command_centre:9.30.3982
-
cpe:2.3:a:gallagher:command_centre:9.40.1359
-
cpe:2.3:a:gallagher:command_centre:9.40.1976
-
cpe:2.3:a:gallagher:command_centre:9.40.2575
-
cpe:2.3:a:gallagher:command_centre:9.50.978
-
cpe:2.3:h:gallagher:high_sec_t20_reader:-
-
cpe:2.3:h:gallagher:high_sec_t20_reader_multi_tech:-
-
cpe:2.3:h:gallagher:t20_alarms_terminal:-
-
cpe:2.3:h:gallagher:t20_mifare_terminal:-
-
cpe:2.3:h:gallagher:t20_multi_tech_terminal:-