CVE-2022-26078: Gallagher Controller 6000 Firmware

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Gallagher Controller 6000 is vulnerable to a Denial of Service attack via conflicting ARP packets with a duplicate IP address. This issue affects: Gallagher Gallagher Controller 6000 vCR8.60 versions prior to 220303a; vCR8.50 versions prior to 220303a; vCR8.40 versions prior to 220303a; vCR8.30 versions prior to 220303a.

Affected products

• Gallagher Controller 6000 Firmware: from 8.30, before 8.30.220303a (fixed in 8.30.220303a); from 8.40, before 8.40.220303a (fixed in 8.40.220303a); from 8.50, before 8.50.220303a (fixed in 8.50.220303a); from 8.60, before 8.60.220303a (fixed in 8.60.220303a)

Published 2022-07-06. Last modified 2026-06-17.