CVE-2026-27790

LOW

2.7

CVSS Score

Published: July 7, 2026 at 03:49 AM UTC

Updated: October 25, 2026 at 08:10 PM UTC

1 product affected across 1 vendorCommand Centre· also runs on 5 platforms

Using T-20 Readers by Gallagher?

Get instant alerts when new vulnerabilities affect T-20 Readers - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

LOW2.7

Exploit prediction

EPSS 0.4%

SSVC

No known exploit

Description

Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected: * 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1)) * 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3)) * 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5)) * 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7)) * all versions of 9.10 and prior.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Command Centre · Gallagher

95%

v < 9.20.43499.30.1594 ≤ v < 9.30.39839.40.1359 ≤ v < 9.40.31309.50.978 ≤ v < 9.50.15879.20 9.30 9.40 9.50

Affected range stops below 9.20.4349, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.30.3983, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.40.3130, so it looks safe — our inference, not a vendor statement

Affected range stops below 9.50.1587, so it looks safe — our inference, not a vendor statement

Affected range stops below vCR9.20.260616a, so it looks safe — our inference, not a vendor statement

Affected range stops below vCR9.30.260616a, so it looks safe — our inference, not a vendor statement

Affected range stops below vCR9.40.260616a, so it looks safe — our inference, not a vendor statement

Affected range stops below vCR9.50.260616a, so it looks safe — our inference, not a vendor statement

gallagher-high-sec-t20-reader (environment) · gallagher-high-sec-t20-reader-multi-tech (environment) · gallagher-t20-alarms-terminal (environment) · gallagher-t20-mifare-terminal (environment) · gallagher-t20-multi-tech-terminal (environment)