# CVE-2026-20801: Gallagher NxWitness and Hanwha VMS cleartext transmission in integration

Source: https://junglewise.ai/threats/cve-2026-20801-gallagher-nxwitness-and-hanwha-vms-cleartext-transmission-in  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-03-03. Updated: 2026-09-25  
License: CC BY 4.0 with a link back

CVE-2026-20801 · Severity: medium · CVSS 5.6 · Published 2026-03-03

Gallagher's video management system integrations for NxWitness and Hanwha cameras transmit sensitive stream data without encryption. An attacker with access to the local network can view live video feeds without authentication, potentially exposing surveillance of facilities, employees, or restricted areas.

Vendors: [Gallagher](https://junglewise.ai/threats/vendors/gallagher).

## Quick answers

**Is CVE-2026-20801 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-20801 being exploited in the wild.

**How severe is CVE-2026-20801?** Medium severity, with a CVSS score of 5.6, published 3 March 2026.

**Which products and versions are affected?** Gallagher Hanwha Vms Integration prior to 9.10.025; Gallagher NxWitness VMS integration prior to 9.10.017.

**Is there a fix for CVE-2026-20801?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-20801 attacked?** It is attacked over the network, in a network appliance.

**Am I affected by CVE-2026-20801?** Check whether you run Gallagher Hanwha Vms Integration, Gallagher Nx Witness Vms Integration or Gallagher NxWitness VMS integration at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The vulnerability is a cleartext transmission issue (CWE-319) in a component used by Gallagher NxWitness VMS and Hanwha VMS integrations with Command Centre. Unprivileged users with network access can intercept and view live video streams because the integration does not encrypt transmitted video data. No authentication is required to exploit this issue; an attacker simply needs local network access to the integration component. The fix is available in NxWitness VMS integration version 9.10.017 and later, and Hanwha VMS integration version 9.10.025 and later.

## Affected products

- Gallagher NxWitness VMS integration prior to 9.10.017
- Gallagher Hanwha VMS integration prior to 9.10.025

## Timeline

- 2026-03-03: disclosed

## References

- [https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801](https://security.gallagher.com/en-NZ/Security-Advisories/CVE-2026-20801)