High severity · published May 25, 2026
CVE-2026-25193
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure. Mitigating Factor: Only…
8.6
CVSS
0.1%
EPSS
No
On KEV
Description
Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.
Mitigating Factor: Only sites that install Command Centre Services with a custom Service Account (not the default Network Service account) are potentially impacted.
Mitigation: For sites concerned about exposure, the recommended action is to change the Service Account password. They can also delete any installer log files, usually found in %programdata%\Gallagher\Command Centre.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.1% · higher than 3% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Active Directory Sync · Gallagher
before 9.10.05 · source: vendor, NVD
CS
Cardholder Sync Utility · Gallagher
before 9.30.104 · source: vendor, NVD
CC
Command Centre Server · Gallagher
9.40 before 9.40.2575 (MR2) · source: vendor
DS
Diagnostics Service · Gallagher
before 2.0.9 · source: vendor, NVD
ES
Elevator Service · Gallagher
before 10.0.8 · source: vendor, NVD
EK
Encoding Kiosk Application · Gallagher
before 9.60.10 · source: vendor, NVD
EI
Entra ID Sync · Gallagher
1.0 before 1.0.10; 2.0 before 2.0.5 · source: vendor
EL
Event Logger · Gallagher
before 8.90.16 · source: vendor, NVD
ES
Event Sync Utility · Gallagher
before 8.70.62 · source: vendor, NVD
MF
Middleware Framework · Gallagher
before 8.90.34 · source: vendor, NVD
NI
Nexudus Integration · Gallagher
before 9.60.21 · source: vendor, NVD
OS
Okta Sync · Gallagher
before 9.40.05 · source: vendor, NVD