Threats Tagged 'cve-2026-25193'

A vulnerability in some Command Centre Service installers allows insertion of sensitive information, specifically Service Account credentials, into log files. This exposure occurs only when a custom Service Account is used instead of the default Network Service account. The vulnerability could lead to confidentiality loss and impact service integrity and availability. Mitigation involves changing the Service Account password and deleting installer log files typically located in %programdata%\Gallagher\Command Centre.

CVE-2026-25193 is a vulnerability in Gallagher Command Centre Server version 9.40 where sensitive information, specifically Service Account credentials, may be inserted into installer log files. This issue affects installations using a custom Service Account rather than the default Network Service account. The vulnerability could lead to exposure of credentials if the log files are accessed. Gallagher has not provided an official patch or remediation level yet. The recommended mitigation is to change the Service Account password and delete any installer log files found in %programdata%\Gallagher\Command Centre. There are no known exploits in the wild at this time.