CVE-2026-20757

Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server. This issue affects Command Centre Server: 9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior.

Score

CVSS 3.1 2.5 Low

Status

Analyzed - disclosures@gallagher.com

Published

2026-03-03

Last modified

2026-03-03

Weaknesses

CWE-667

Affected products

• Command Centre (Gallagher)
• Command Centre Server (Gallagher)

References

• https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20757