PT-2026-22717
CVE-2026-20801
·
Published
2026-03-03
·
Updated
2026-08-17
Description by
CVSS 3.1
5.6
MediumMetricsAV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Gallagher NxWitness VMS integration versions prior to 9.10.017
Gallagher Hanwha VMS integration versions prior to 9.10.025
Description
A component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams due to cleartext transmission of sensitive information.
Recommendations
Update Gallagher NxWitness VMS integration to version 9.10.017 or later.
Update Gallagher Hanwha VMS integration to version 9.10.025 or later.
Found an issue in the description? Have something to add? Feel free to write us 👾