CVE Feed

    Dashboard / CVE / CVE-2026-20801

    CVE-2026-20801

    Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

    Published:Mar 3, 2026
    Last Modified:Aug 17, 2026
    EPS:Mar 3, 2026
    EPSS Score:0.00102
    CVSS Score:5.6

    Affected Products

    Vendor
    Gallagher
    Product
    Hanwha Vms Integration
    Vendor
    Gallagher
    Product
    Nx Witness Vms Integration
    Vendor
    Gallagher
    Product
    Nxwitness Vms And Hanwha Vms Integrations

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High