CVE-2025-47147: Gallagher Command Centre Mobile

Medium severity, CVSS 5.7. EPSS: 0.1% chance of exploitation in the next 30 days.

Cleartext Storage of Sensitive Information (CWE-312) in the Command Centre Mobile Client on Android and iOS could allow an attacker with access to a logged-in Operator's mobile device to extract the session token and exploit access for a limited duration. This issue affects Command Centre Mobile Client versions prior to 9.40.123.

Affected products

• Gallagher Command Centre Mobile: before 9.40.123 (fixed in 9.40.123)

Published 2026-03-03. Last modified 2026-08-14.