{"id":"CVE-2026-25193","state":"PUBLISHED","title":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. ","description":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre.","publishedAt":"2026-05-25T05:28:14.766Z","updatedAt":"2026-05-26T14:24:08.348Z","severity":{"score":8.1,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H","source":"Gallagher"},"assigner":"Gallagher","products":["Gallagher Command Centre Server","Gallagher Active Directory Sync","Gallagher Cardholder Sync Utility","Gallagher Diagnostics Service","Gallagher Elevator Service","Gallagher Encoding Kiosk Application","Gallagher Entra ID Sync","Gallagher Event Sync Utility","Gallagher Event Logger","Gallagher Middleware Framework","Gallagher Nexudus Integration","Gallagher Okta Sync","Gallagher Papercut Interface Integration","Gallagher SIP Integration"],"affected":[{"vendor":"Gallagher","product":"Command Centre Server","defaultStatus":"unaffected","versions":[{"version":"9.40","status":"affected","lessThan":"9.40.2575 (MR2)","versionType":"custom"}]},{"vendor":"Gallagher","product":"Active Directory Sync","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.10.05","versionType":"custom"}]},{"vendor":"Gallagher","product":"Cardholder Sync Utility","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.30.104","versionType":"custom"}]},{"vendor":"Gallagher","product":"Diagnostics Service","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"2.0.9","versionType":"custom"}]},{"vendor":"Gallagher","product":"Elevator Service","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"10.0.8","versionType":"custom"}]},{"vendor":"Gallagher","product":"Encoding Kiosk Application","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.60.10","versionType":"custom"}]},{"vendor":"Gallagher","product":"Entra ID Sync","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.0.10","versionType":"custom"},{"version":"2.0","status":"affected","lessThan":"2.0.5","versionType":"custom"}]},{"vendor":"Gallagher","product":"Event Sync Utility","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.70.62","versionType":"custom"}]},{"vendor":"Gallagher","product":"Event Logger","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.90.16","versionType":"custom"}]},{"vendor":"Gallagher","product":"Middleware Framework","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.90.34","versionType":"custom"}]},{"vendor":"Gallagher","product":"Nexudus Integration","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.60.21","versionType":"custom"}]},{"vendor":"Gallagher","product":"Okta Sync","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.40.05","versionType":"custom"}]},{"vendor":"Gallagher","product":"Papercut Interface Integration","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.60.02","versionType":"custom"}]},{"vendor":"Gallagher","product":"SIP Integration","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"10.1.0","versionType":"custom"}]}],"references":["https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"],"weaknesses":["CWE-532"],"ingestedAt":"2026-10-29T20:11:21.040Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2026/25xxx/CVE-2026-25193.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2026-25193","state":"PUBLISHED","datePublished":"2026-05-25T05:28:14.766Z","dateUpdated":"2026-05-26T14:24:08.348Z","assignerShortName":"Gallagher","assignerOrgId":"0c426f27-3ee1-4eff-be88-288d5a1822bc","dateReserved":"2026-03-01T23:45:09.705Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. \nMitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.\n\nMitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\\Gallagher\\Command Centre."}],"affected":[{"vendor":"Gallagher","product":"Command Centre Server","defaultStatus":"unaffected","versions":[{"version":"9.40","status":"affected","lessThan":"9.40.2575 (MR2)","versionType":"custom"}]},{"vendor":"Gallagher","product":"Active Directory Sync","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.10.05","versionType":"custom"}]},{"vendor":"Gallagher","product":"Cardholder Sync Utility","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.30.104","versionType":"custom"}]},{"vendor":"Gallagher","product":"Diagnostics Service","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"2.0.9","versionType":"custom"}]},{"vendor":"Gallagher","product":"Elevator Service","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"10.0.8","versionType":"custom"}]},{"vendor":"Gallagher","product":"Encoding Kiosk Application","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.60.10","versionType":"custom"}]},{"vendor":"Gallagher","product":"Entra ID Sync","defaultStatus":"unaffected","versions":[{"version":"1.0","status":"affected","lessThan":"1.0.10","versionType":"custom"},{"version":"2.0","status":"affected","lessThan":"2.0.5","versionType":"custom"}]},{"vendor":"Gallagher","product":"Event Sync Utility","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.70.62","versionType":"custom"}]},{"vendor":"Gallagher","product":"Event Logger","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.90.16","versionType":"custom"}]},{"vendor":"Gallagher","product":"Middleware Framework","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"8.90.34","versionType":"custom"}]},{"vendor":"Gallagher","product":"Nexudus Integration","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.60.21","versionType":"custom"}]},{"vendor":"Gallagher","product":"Okta Sync","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.40.05","versionType":"custom"}]},{"vendor":"Gallagher","product":"Papercut Interface Integration","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"9.60.02","versionType":"custom"}]},{"vendor":"Gallagher","product":"SIP Integration","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThan":"10.1.0","versionType":"custom"}]}],"references":[{"url":"https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-25193"}],"metrics":[{"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}],"cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"HIGH","availabilityImpact":"HIGH","baseSeverity":"HIGH","baseScore":8.1,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-532","lang":"en","description":"CWE-532 Insertion of sensitive information into log file","type":"CWE"}]}],"providerMetadata":{"shortName":"Gallagher","orgId":"0c426f27-3ee1-4eff-be88-288d5a1822bc","dateUpdated":"2026-05-25T05:28:14.766Z"},"source":{"discovery":"INTERNAL"},"x_generator":{"engine":"Vulnogram 1.0.2"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-05-26T14:24:00.870402Z","id":"CVE-2026-25193","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-05-26T14:24:08.348Z"}}]}}}