Gallagher — Vulnerabilities & Security Advisories 1

Gallagher operates primarily as a provider of physical security solutions, specializing in access control, time and attendance, and video management systems for enterprise environments. Historically, its software ecosystem has been susceptible to a range of critical vulnerabilities, including remote code execution, cross-site scripting, and privilege escalation flaws. These weaknesses often stem from insufficient input validation and improper access controls within its web-based management interfaces. Notable incidents have revealed that attackers can exploit these defects to gain unauthorized administrative access or execute arbitrary commands on affected servers. The accumulation of 65 recorded CVEs highlights persistent challenges in securing its legacy and modern platforms against sophisticated cyber threats. Organizations deploying Gallagher solutions must prioritize rigorous patch management and network segmentation to mitigate the risk of compromise, given the sensitive nature of the physical security data these systems manage.