CVE-2021-23197: Gallagher Command Centre

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

Unquoted service path vulnerability in the Gallagher Controller Service allows an unprivileged user to execute arbitrary code as the account that runs the Controller Service. This issue affects: Gallagher Command Centre 8.50 versions prior to 8.50.2048 (MR3) ;

Affected products

• Gallagher Command Centre: from 8.50, before 8.50.2048 (fixed in 8.50.2048)

Published 2021-11-18. Last modified 2026-06-17.