CVE-2023-23576: Gallagher Command Centre

Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Incorrect behavior order in the Command Centre Server could allow privileged users to gain physical access to the site for longer than intended after a network outage when competencies are used in the access decision. This issue affects: Gallagher Command Centre: 8.90 prior to vEL8.90.1620 (MR2), 8.80 prior to vEL8.80.1369 (MR3), 8.70 prior to vEL8.70.2375 (MR5), 8.60 prior to vEL8.60.2550 (MR7), all versions of 8.50 and prior.

Affected products

• Gallagher Command Centre: up to and including 8.50; from 8.60, before 8.60.2550 (fixed in 8.60.2550); from 8.70, before 8.70.2375 (fixed in 8.70.2375); from 8.80, before 8.80.1369 (fixed in 8.80.1369); from 8.90, before 8.90.1620 (fixed in 8.90.1620)

Published 2023-12-18. Last modified 2026-06-17.