CVE-2026-20801

CVE-2026-20801CVE-2026-20801

gallagher / hanwha_vms_integration

Description

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

Scoring

CVSS 5.6 ()
VectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Last modified2026-08-17
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.