PT-2026-22717 · Gallagher · Hanwha Vms+1

Published 2026-03-03 · Updated 2026-03-03 · CVE-2026-20801

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Gallagher NxWitness VMS integration versions prior to 9.10.017 Gallagher Hanwha VMS integration versions prior to 9.10.025

Description A component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams due to cleartext transmission of sensitive information.

Recommendations Update Gallagher NxWitness VMS integration to version 9.10.017 or later. Update Gallagher Hanwha VMS integration to version 9.10.025 or later.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2026-20801

Affected Products

Hanwha Vms

Nxwitness Vms

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-20801 · Security Note
• https://t.me/cveNotify/153886 · Telegram Post
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801 · Note
• https://twitter.com/cyberbivash/status/2028697509074219157 · Twitter Post
• https://twitter.com/CVEnew/status/2028683864009531595 · Twitter Post
• https://twitter.com/infoflowcloud/status/2028684454667960485 · Twitter Post
• https://t.me/CVEtracker/46184 · Telegram Post