low2.5
CVE-2026-20757
Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centr…
Impact
Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server. This issue affects Command Centre Server: 9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Gallagher | Command Centre | before 9.10.4647 from 9.20.1043 before 9.20.3783 from 9.30.1594 before 9.30.3382 from 9.40.1359 before 9.40.1976 |