CVE-2026-27790
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk13th percentile - higher than 13% of all known CVEs
Summary
An uncaught exception in T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial of service. The vulnerability affects Command Centre versions 9.50, 9.40, 9.30, 9.20, and all earlier versions.
Risk Assessment
The risk involves the possibility of a deliberate restart of readers by an authorized operator, which can lead to disruptions in the access control system and temporary loss of service availability.
Recommendation
It is recommended to immediately update Command Centre to versions containing the fixes: 9.50 MR1, 9.40 MR3, 9.30 MR5, 9.20 MR7, or later.
Original NVD description (English source)
Uncaught Exception (CWE-248) in the T20 Readers allows an authenticated and authorized operator to trigger a restart by sending specific requests, resulting in a temporary denial of service. Version of Command Centre affected: * 9.50 prior to vCR9.50.260616a (distributed in 9.50.1587(MR1)) * 9.40 prior to vCR9.40.260616a (distributed in 9.40.3130(MR3)) * 9.30 prior to vCR9.30.260616a (distributed in 9.30.3983(MR5)) * 9.20 prior to vCR9.20.260616a (distributed in 9.20.4349(MR7)) * all versions of 9.10 and prior.