CVE-2026-20801

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-20801", "assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "state": "PUBLISHED", "assignerShortName": "Gallagher", "dateReserved": "2026-03-01T23:45:09.734Z", "datePublished": "2026-03-03T02:41:10.357Z", "dateUpdated": "2026-03-03T16:30:31.016Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "product": "NxWitness VMS and Hanwha VMS Integrations", "vendor": "Gallagher", "versions": [{"lessThan": "9.10.017", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "9.10.025", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Cleartext Transmission of Sensitive Information (CWE-319) in</span><strong>&nbsp;</strong><span style=\"background-color: rgb(255, 255, 255);\">a component used in the Gallagher </span><span style=\"background-color: rgb(255, 255, 255);\">Hanwha VMS and Gallagher NxWitness VMS integrations</span><b>&nbsp;</b><span style=\"background-color: rgb(255, 255, 255);\">allows unprivileged users with local network access to view live video streams. </span>\n\n \n\n<p>This issue affects a<span style=\"background-color: rgb(255, 255, 255);\">ll versions of </span><span style=\"background-color: rgb(255, 255, 255);\">Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.</span><br>\n\n</p>"}], "value": "Cleartext Transmission of Sensitive Information (CWE-319) in\u00a0a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations\u00a0allows unprivileged users with local network access to view live video streams. \n\n \n\nThis issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025."}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "shortName": "Gallagher", "dateUpdated": "2026-03-03T02:41:10.357Z"}, "references": [{"url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801"}], "source": {"discovery": "INTERNAL"}, "x_generator": {"engine": "Vulnogram 0.5.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-03T16:27:35.448713Z", "id": "CVE-2026-20801", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-03T16:30:31.016Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-20801", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-03T16:27:35.448713Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-03T16:30:26.575Z"}}], "cna": {"source": {"discovery": "INTERNAL"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Gallagher", "product": "NxWitness VMS and Hanwha VMS Integrations", "versions": [{"status": "affected", "version": "0", "lessThan": "9.10.017", "versionType": "custom"}, {"status": "affected", "version": "0", "lessThan": "9.10.025", "versionType": "custom"}], "defaultStatus": "affected"}], "references": [{"url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801"}], "x_generator": {"engine": "Vulnogram 0.5.0"}, "descriptions": [{"lang": "en", "value": "Cleartext Transmission of Sensitive Information (CWE-319) in\u00a0a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations\u00a0allows unprivileged users with local network access to view live video streams. \n\n \n\nThis issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">Cleartext Transmission of Sensitive Information (CWE-319) in</span><strong>&nbsp;</strong><span style=\"background-color: rgb(255, 255, 255);\">a component used in the Gallagher </span><span style=\"background-color: rgb(255, 255, 255);\">Hanwha VMS and Gallagher NxWitness VMS integrations</span><b>&nbsp;</b><span style=\"background-color: rgb(255, 255, 255);\">allows unprivileged users with local network access to view live video streams. </span>\n\n \n\n<p>This issue affects a<span style=\"background-color: rgb(255, 255, 255);\">ll versions of </span><span style=\"background-color: rgb(255, 255, 255);\">Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.</span><br>\n\n</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-319", "description": "CWE-319 Cleartext Transmission of Sensitive Information"}]}], "providerMetadata": {"orgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "shortName": "Gallagher", "dateUpdated": "2026-03-03T02:41:10.357Z"}}}, "cveMetadata": {"cveId": "CVE-2026-20801", "state": "PUBLISHED", "dateUpdated": "2026-03-03T16:30:31.016Z", "dateReserved": "2026-03-01T23:45:09.734Z", "assignerOrgId": "0c426f27-3ee1-4eff-be88-288d5a1822bc", "datePublished": "2026-03-03T02:41:10.357Z", "assignerShortName": "Gallagher"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "product": "NxWitness VMS and Hanwha VMS Integrations", "vendor": "Gallagher", "versions": [{"lessThan": "9.10.017", "status": "affected", "version": "0", "versionType": "custom"}, {"lessThan": "9.10.025", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "disclosures@gallagher.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:gallagher:hanwha_vms_integration:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "82B4808B-4DB4-4EBB-8681-6B06904A6030", "versionEndExcluding": "9.10.025", "vulnerable": true}, {"criteria": "cpe:2.3:a:gallagher:nx_witness_vms_integration:*:*:*:*:*:command_centre:*:*", "matchCriteriaId": "7311444E-ECD2-4324-B159-B9C738668E9A", "versionEndExcluding": "9.10.017", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cleartext Transmission of Sensitive Information (CWE-319) in\u00a0a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations\u00a0allows unprivileged users with local network access to view live video streams. \n\n \n\nThis issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025."}, {"lang": "es", "value": "Transmisi\u00f3n en texto claro de informaci\u00f3n sensible (CWE-319) en un componente utilizado en las integraciones de Gallagher Hanwha VMS y Gallagher NxWitness VMS permite a usuarios sin privilegios con acceso a la red local visualizar transmisiones de video en vivo.\n\nEste problema afecta a todas las versiones de la integraci\u00f3n de Gallagher NxWitness VMS anterior a la 9.10.017 y a la integraci\u00f3n de Gallagher Hanwha VMS anterior a la 9.10.025."}], "id": "CVE-2026-20801", "lastModified": "2026-08-17T19:03:02.357", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 5.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.2, "impactScore": 3.4, "source": "disclosures@gallagher.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-20801", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-03T16:27:35.448713Z", "version": "2.0.3"}}]}, "published": "2026-03-03T03:15:54.540", "references": [{"source": "disclosures@gallagher.com", "tags": ["Vendor Advisory"], "url": "https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801"}], "sourceIdentifier": "disclosures@gallagher.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-319"}], "source": "disclosures@gallagher.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,9.10.017)"}}, {"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,9.10.025)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "NxWitness VMS and Hanwha VMS Integrations", "source": "cna", "vendor": "Gallagher"}, "product": "nxwitness_vms_and_hanwha_vms_integrations", "vendor": "gallagher"}], "analysis": {"en": {"generated_at": "2026-04-16T14:10:05.560203+00:00", "value": {"mitigation_remediation": ["Upgrade the Gallagher NxWitness VMS integration to version 9.10.017 or later, and the Gallagher Hanwha VMS integration to version 9.10.025 or later.", "If an upgrade cannot be performed immediately, isolate the VMS integration components from the rest of the network using firewalls or VLAN segmentation to restrict local access to authorized personnel only.", "Verify that the updated integrations employ TLS or another form of encrypted transport for all video stream traffic to ensure sensitive data are no longer sent in cleartext."], "summary": {"action": "Update Integration", "impact": "Information disclosure of live video streams"}, "threat_synthesis": {"affected_systems": "Gallagher NxWitness VMS integration versions prior to 9.10.017 and Gallagher Hanwha VMS integration versions prior to 9.10.025 are affected. The issue resides in components used by these integrations and pertains to local network users only.\"", "description_and_impact": "The vulnerability is a cleartext transmission of sensitive information (Cleartext Transmission of Sensitive Information, CWE-319). It allows an unprivileged user who can reach the local network to view live video streams that are intended to be protected. The result is a confidentiality breach that could expose operational video feeds to external observers.\"", "risk_and_exploitability": "The CVSS score of 5.6 indicates moderate overall risk. EPSS is less than 1%, suggesting exploit probability is very low, and the vulnerability is not listed in the CISA Known Exploited Vulnerabilities catalog. The attack vector requires local network access; unprivileged users can observe live video streams without needing higher privileges or remote access. Because the data are transmitted in cleartext, an attacker can capture the streams using standard network monitoring tools, posing a data disclosure threat to the organization.\""}}}}, "created": "2026-03-04T14:54:33.481933+00:00", "title": "Cleartext Transmission of Live Video Streams via Gallagher VMS Integrations", "updated": "2026-04-16T14:15:28.811765+00:00", "vendors": ["gallagher", "gallagher$PRODUCT$nxwitness_vms_and_hanwha_vms_integrations"]}