CVE-2021-23136: Gallagher Command Centre

Medium severity, CVSS 6.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Improper Authorization vulnerability in Gallagher Command Centre Server allows macro overrides to be performed by an unprivileged Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.

Affected products

• Gallagher Command Centre: up to and including 8.10; from 8.20, before 8.20.1259 (fixed in 8.20.1259); from 8.30, before 8.30.1359 (fixed in 8.30.1359); from 8.40, before 8.40.1888 (fixed in 8.40.1888)

Published 2021-06-11. Last modified 2026-06-17.