← Database

CVE-2026-27844

LOW CVSS: 2.7 Published: 2026-07-07 Modified: 2026-08-14

Description

Uncaught Exception (CWE-248) in the Controller 6000 and Controller 7000 diagnostic web interface allows an authenticated and authorized operator to trigger a Controller restart by sending specific requests, resulting in a temporary denial of service.  Version of Command Centre affected: * 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1)) * 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3)) * 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5)) * 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7)) * all versions of 9.10 and prior.

Affected Platforms

Gallagher Controller 7000 Two DoorGallagher Command CentreGallagher Controller 7000 EnhancedGallagher Controller 6000Gallagher Controller 7000 Single DoorGallagher Controller 7000Gallagher Controller 7000 High Security

Weakness Type

CWE-248

References