CVE-2026-20801CWE-319

CVE-2026-20801

Medium · published March 3, 2026

CVSS v3.1
5.6
EPSS
0%
Percentile
1.1
In the wild
Unconfirmed
What it is

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams.

This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00106 · 1.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2026-03-03T08:15Z
Affected products (2)
ProductVersionsFixed in
gallagher/hanwha_vms_integration< 9.10.0259.10.025
gallagher/nx_witness_vms_integration< 9.10.0179.10.017
References (1)
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801 · [email protected]
EPSS history
Timeline
  • 03 MAR 02:41Z
    Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows…
    cvelistv5