Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access …

Medium CVSS 5.6

CVECVE-2026-20801

First seen2026-08-17 20:15 UTC

Disclosed2026-03-03 03:15 UTC

Last updated2026-08-17 20:15 UTC

Channel statusauto

Summary

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

In-depth triage

No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).

Affected products

Sources

NVD DATABASE

Original Links

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801 Vendor Advisory

Timeline

2026-08-17 nvd_ingest NVD