CVE-2021-23140: Gallagher Command Centre

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper Authorization vulnerability in Gallagher Command Centre Server allows command line macros to be modified by an unauthorised Command Centre Operator. This issue affects: Gallagher Command Centre 8.40 versions prior to 8.40.1888 (MR3); 8.30 versions prior to 8.30.1359 (MR3); 8.20 versions prior to 8.20.1259 (MR5); version 8.10 and prior versions.

Affected products

• Gallagher Command Centre: up to and including 8.10; from 8.20, before 8.20.1259 (fixed in 8.20.1259); from 8.30, before 8.30.1359 (fixed in 8.30.1359); from 8.40, before 8.40.1888 (fixed in 8.40.1888)

Published 2021-06-11. Last modified 2026-06-17.