PT-2026-22717 · Gallagher · Hanwha Vms+1

Publicado 2026-03-03 · Atualizado 2026-03-03 · CVE-2026-20801

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Média

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Gallagher NxWitness VMS integration versions prior to 9.10.017 Gallagher Hanwha VMS integration versions prior to 9.10.025

Description A component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams due to cleartext transmission of sensitive information.

Recommendations Update Gallagher NxWitness VMS integration to version 9.10.017 or later. Update Gallagher Hanwha VMS integration to version 9.10.025 or later.

Correção

Cleartext Transmission of Sensitive Information

Enumeração de Fraquezas

CWE-319

Identificadores relacionados

CVE-2026-20801

Produtos afetados

Hanwha Vms

Nxwitness Vms

Referências · 7

• https://t.me/cveNotify/153886 · Publicação no Telegram
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-20801 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2028697509074219157 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2028683864009531595 · Publicação no Twitter
• https://twitter.com/infoflowcloud/status/2028684454667960485 · Publicação no Twitter
• https://t.me/CVEtracker/46184 · Publicação no Telegram