CVE-2025-46406: Gallagher Command Centre Server

Medium severity, CVSS 5.6. EPSS: 0.1% chance of exploitation in the next 30 days.

A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged activities across the Division boundary. This issue affects Command Centre Server: 9.30 prior to 9.30.1874 (MR1), 9.20 prior to 9.20.2337 (MR3), 9.10 prior to 9.10.3194 (MR6), 9.00 prior to 9.00.3371 (MR7), all versions of 8.90 and prior.

Affected products

• Gallagher Command Centre Server: up to and including 8.90; from 9.30, before 9.30.1874 (MR1) (fixed in 9.30.1874 (MR1)); from 9.20, before 9.20.2337 (MR3) (fixed in 9.20.2337 (MR3)); from 9.10, before 9.10.3194 (MR6) (fixed in 9.10.3194 (MR6)); from 9.00, before 9.00.3371 (MR7) (fixed in 9.00.3371 (MR7))

Published 2025-07-10. Last modified 2026-06-17.