PT-2026-56142 · Unknown · Command Centre Server

Published 2026-07-07 · Updated 2026-07-07 · CVE-2026-26053

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Command Centre Server versions prior to vEL9.50.1587(MR1) Command Centre Server versions prior to vEL9.40.3130(MR3) Command Centre Server versions prior to vEL9.30.3983(MR5) Command Centre Server versions prior to vEL9.20.4349(MR7) Command Centre Server versions 9.10

Description An Incorrect Privilege Assignment issue in the Command Centre Server allows an authenticated operator with limited privileges to execute operations for which they are not authorized.

Recommendations Update version 9.50 to vEL9.50.1587(MR1) or later. Update version 9.40 to vEL9.40.3130(MR3) or later. Update version 9.30 to vEL9.30.3983(MR5) or later. Update version 9.20 to vEL9.20.4349(MR7) or later. At the moment, there is no information about a newer version that contains a fix for this vulnerability for version 9.10.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2026-26053

Affected Products

Command Centre Server

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2026-26053 · Security Note
• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-26053 · Note
• https://twitter.com/CVEnew/status/2074365812631040158 · Twitter Post