Command Centre Server vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

CC

Product

Command Centre Server

by Gallagher · last CVE Jul 7, 2026

12

CVEs

0

On KEV

9.9

Max CVSS

0

New 30D

Vulnerabilities12 In the news0 Timeline

Severity mix

Critical 1High 4Medium 6Low 1

Severity

All severities12 Critical1 High4 Medium6 Low1

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Command Centre Server to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-41724	8.7	0%	Mar 10	Improper Certificate Validation (CWE-295) in the Gallagher Command Centre SALTO integration allowed an attacker to spoof the SALTO server Affected: before 9.20.1043
CVE-2026-25193	8.6	0%	May 25	Insertion of Sensitive Information into Log File (CWE-532) in some Command Centre Service installers could lead to Service Account credentials exposure.  Mitigating Factor: Only… Affected: 9.40 before 9.40.2575 (MR2)
CVE-2024-42407	8.5	0%	Dec 12	Insertion of Sensitive Information into Log File (CWE-532) in the Gallagher Command Centre Alarm Transmitter feature could allow an authenticated Operator to view some security… Affected: through 8.80; 9.10 before 9.10.2149 (MR4); 9.00 before 9.00.2374 (MR5); 8.90 before 8.90.2356 (MR6)
CVE-2024-43690	8.0	1%	Sep 11	Inclusion of Functionality from Untrusted Control Sphere(CWE-829) in the Command Centre Server and Workstations may allow an attacker to perform Remote Code Execution (RCE) Affected: through 8.70; 9.10 before vEL9.10.1530(MR2); 9.00 before vEL9.00.2168 (MR4); 8.90 before vEL8.90.2155 (MR5); 8.80 before vEL8.80.1938 (MR6)