CVE-2026-20801Disclosure(gallagher / hanwha_vms_integration)

LOWCVSS 5.6 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged users with local network access to view live video streams. This issue affects all versions of Gallagher NxWitness VMS integration prior to 9.10.017 and Gallagher Hanwha VMS integration prior to 9.10.025.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-319

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • hanwha_vms_integration
  • nx_witness_vms_integration

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 3 classified signals
  • 3 total mentions across 1 day

Affected systems

Vendors
Products
hanwha_vms_integrationnx_witness_vms_integration

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-03: 3Technical Details · 2026-03-03: 303-03
Signal classification1 categories
Disclosure
3100.0%
Referenced assets3 URLs
Full discourse3 posts
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-20801 - Gallagher Hanwha VMS and Gallagher NxWitness VMS Unprivileged Access to Live Video Streams Intel Report: https://ift.tt/DqV7ANQ

    Post summary

    An alert announces CVE-2026-20801, an unprivileged access vulnerability affecting Gallagher Hanwha VMS and NxWitness VMS, with an Intel report link provided.

    0000043
    342 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-20801 Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged… https://www.cve.org/CVERecord?id=CVE-2026-20801 ----- Traducción: CVE-2026-20801 Tra… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑20801, describing a cleartext transmission vulnerability in Gallagher VMS components, but provides no PoC, exploit, or patch details.

    0000039
    55 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-20801 Cleartext Transmission of Sensitive Information (CWE-319) in a component used in the Gallagher Hanwha VMS and Gallagher NxWitness VMS integrations allows unprivileged… https://www.cve.org/CVERecord?id=CVE-2026-20801

    Post summary

    The text announces CVE-2026-20801, a cleartext transmission vulnerability in Gallagher VMS integrations, providing only the vulnerability description and a link to the CVE record, with no PoC, exploit, or patch details.

    00000223
    56.6K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appgallagherhanwha_vms_integration-command_centre-
Appgallaghernx_witness_vms_integration-command_centre-

Explore more