TI-2026-16834 Aliases CVE-2026-20801 GHSA-799x-hcrc-c72v

Cleartext transmission of sensitive information in Gallagher NxWitness VMS and Hanwha VMS…

LOW 24CWE-319Published 2026-03-03 · Updated 2026-03-03

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: High
Impact type: Information disclosure
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-319.

Summary

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV

EPSS 0.00117 1st percentileScored 2026-11-07

Fix Fixed NxWitness VMS and Hanwha VMS Integrations (Gallagher): 9.10.017, 9.10.025

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: None
Automatable: No
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Gallagher	NxWitness VMS and Hanwha VMS Integrations	before 9.10.017; before 9.10.025	9.10.017, 9.10.025	Patch available	CNA

NxWitness VMS and Hanwha VMS Integrations VendorGallagher Affected before 9.10.017; before 9.10.025 Fixed in 9.10.017, 9.10.025 Patch available CNA

CPE configurations NVD · 2

CPE	Versions	Role	Vendor
cpe:2.3:a:gallagher:hanwha_vms_integration::::::command_centre::*	before 9.10.025	Vulnerable	Gallagher
cpe:2.3:a:gallagher:nx_witness_vms_integration::::::command_centre::*	before 9.10.017	Vulnerable	Gallagher

cpe:2.3:a:gallagher:hanwha_vms_integration:*:*:*:*:*:command_centre:*:* Versions before 9.10.025 Vulnerable ·Gallagher
cpe:2.3:a:gallagher:nx_witness_vms_integration:*:*:*:*:*:command_centre:*:* Versions before 9.10.017 Vulnerable ·Gallagher

Remediation

Fix · CNA NxWitness VMS and Hanwha VMS Integrations (Gallagher) Fixed in 9.10.017, 9.10.025

Timeline

2026-10-02 Threatist record created from CVE-2026-20801
2026-10-03 Alias added: GHSA-799x-hcrc-c72v

References

Advisory 1

https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences