Skip to content
OpenAdvisories
Low · 2.5 CVE-2026-20757 EUVD-2026-9275GHSA-v28g-2c4f-rjxr

Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service …

Published Mar 3, 2026 · Updated Mar 3, 2026 · Assigned by Gallagher

Description

Improper Locking vulnerability (CWE-667) in Gallagher Morpho integration allows a privileged operator to cause a limited denial-of-service in the Command Centre Server.

This issue affects Command Centre Server:

9.40 prior to vEL9.40.1976(MR1), 9.30 prior to vEL9.30.3382 (MR4), 9.20 prior to vEL9.20.3783 (MR6), 9.10 prior to vEL9.10.4647 (MR9), all versions of 9.00 and prior.

Affected products

VendorProductAffectedFixed
Gallagher Command Centre Server ≤ 9.00, 9.40 – < 9.40.1976(MR1), 9.30 – < 9.30.3382 (MR4), 9.20 – < 9.20.3783 (MR6), 9.10 – < 9.10.4647 (MR9) 9.40.1976(MR1)

References