CVE-2026-26053CWE-266

CVE-2026-26053

Medium · published July 7, 2026

CVSS v3.1
5.3
EPSS
0%
Percentile
15.1
In the wild
Unconfirmed
What it is

An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some operations that they would not normally be authorized to perform. Version of Command Centre affected: 9.50 prior to vEL9.50.1587(MR1), 9.40 prior to vEL9.40.3130(MR3), 9.30 prior to vEL9.30.3983(MR5), 9.20 prior to vEL9.20.4349(MR7), all versions of 9.10.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00247 · 15.1th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-07-07T09:16Z
Affected products (4)
ProductVersionsFixed in
gallagher/command_centre< 9.20.43499.20.4349
gallagher/command_centre≥ 9.30.1594, < 9.30.39839.30.3983
gallagher/command_centre≥ 9.40.1359, < 9.40.31309.40.3130
gallagher/command_centre≥ 9.50.978, < 9.50.15879.50.1587
References (1)
https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-26053 · [email protected]
EPSS history
Timeline
  • 07 JUL 03:48Z
    An Incorrect Privilege Assignment (CWE-266) vulnerability in the Command Centre Server allows an authenticated operator with limited privileges to perform some…
    cvelistv5