← Database

CVE-2026-25193

HIGH CVSS: 8.1 Published: 2026-05-25 Modified: 2026-08-17

Description

Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted. Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.

Affected Platforms

Gallagher Cardholder Sync UtilityGallagher Event Sync UtilityGallagher Active Directory SyncGallagher Nexudus IntegrationGallagher Elevator ServiceGallagher Okta SyncGallagher Command CentreGallagher Entra Id Sync V1Gallagher Entra Id Sync V2Gallagher Event Logger

Weakness Type

CWE-532

References