← Back

CVE-2026-20801

nvd nist
Published: Mar 3, 2026Modified: Aug 17, 2026

JSON object

Loading...
5.6
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Exploitability: 2.2 / Impact: 3.4
Source: disclosures@gallagher.com (Secondary)

Description

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

Affected (2)

Gallagher
2 products
Hanwha Vms Integration
Nx Witness Vms Integration
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Hanwha Vms Integration
Before 9.10.025
Nx Witness Vms Integration
Before 9.10.017

Related CWEs

CWE-319
Cleartext Transmission of Sensitive Information
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.

References (1)

Source: disclosures@gallagher.com
Vendor Advisory

Timeline

No history available yet.