CVE-2026-20757

LOW 2.5CVE-2026-20757 · Published 03/03/2026 · updated 18/08/2026

In short

CVE-2026-20757 is a LOW (CVSS 2.5) vulnerability affecting command centre (gallagher).
Chance of exploitation in the next 30 days (EPSS): 0.08%, higher than 0.10% of all vulnerabilities.
Fix: update to 9.20.3783, 9.30.3382, 9.40.1976, 9.10.4647 or later.

Package	Affected versions	Patched versions
command centre gallagher	`≥ 9.20.1043, < 9.20.3783≥ 9.30.1594, < 9.30.3382≥ 9.40.1359, < 9.40.1976< 9.10.4647`	`9.20.37839.30.33829.40.19769.10.4647`

Description

Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server. This issue affects Command Centre Server: 9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior.

References

security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20757 · Vendor Advisory

More vulnerabilities in command centre

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

command centre

gallagher

≥ 9.20.1043, < 9.20.3783≥ 9.30.1594, < 9.30.3382≥ 9.40.1359, < 9.40.1976< 9.10.4647

9.20.37839.30.33829.40.19769.10.4647

Description

More vulnerabilities in command centre

See all →