CVEs we hold for Gallagher
Records whose assigning authority named Gallagher as the affected vendor. Newest identifiers first, capped at 200.
CVE-2026-20801no title heldGallagher NxWitness VMS and Hanwha VMS Integrations CVE-2026-1913Gallagher Website Design <= 2.6.4 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'prefix' Shortcode…gallagherwebsitedesign Gallagher Website Design CVE-2024-41146no title heldGallagher Controller 6000 and Controller 7000 CVE-2024-39808no title heldGallagher Controller 6000 and Controller 7000 CVE-2024-24972no title heldGallagher Controller 6000 and Controller 7000 CVE-2024-23906no title heldGallagher Controller 6000 and Controller 7000 CVE-2024-23485no title heldGallagher Controller 6000 and Controller 7000 CVE-2024-23317no title heldGallagher Controller 6000 and Controller 7000 CVE-2024-22387no title heldGallagher Controller 6000 and Controller 7000 CVE-2023-46686no title heldGallagher Command Centre Diagnostics Service CVE-2023-25074Competency access levels not enforced in the serverGallagher Command Centre CVE-2023-24584Controller 6000 buffer overflow via upload feature in web interfaceGallagher Controller 6000 CVE-2021-23162no title heldGallagher Command Centre Mobile Connect for Android CVE-2021-23155no title heldGallagher Command Centre Mobile Client for Android 71 records, read from the index as it stood on 20 Sep 2026. Every row opens the record it names, and every value on that record opens its own receipt.
Everything on this page is free. Public data. Withholding it protects nothing.