VYPR
← All advisories
Critical severity9.9NVD Advisory· Published Oct 23, 2025· Updated Jun 17, 2026

CVE-2025-47699

CVE-2025-47699

Description

Exposure of Sensitive System Information to an Unauthorized Control Sphere (CWE-497) in the Gallagher Morpho integration could allow an authenticated operator with limited site permissions to make critical changes to local Morpho devices.

This issue affects Command Centre Server:

9.30 prior to vEL9.30.2482 (MR2), 9.20 prior to vEL9.20.2819 (MR4), 9.10 prior to vEL9.10.3672 (MR7), 9.00 prior to vEL9.00.3831 (MR8), all versions of 8.90 and prior.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1
  • Gallagher/Command Centre Serverllm-fuzzy
    Range: <vEL9.30.2482 (MR2), <vEL9.20.2819 (MR4), <vEL9.10.3672 (MR7), <vEL9.00.3831 (MR8), all versions of 8.90 and prior

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.