Gladinet
Gladinet Centrestack: vulnerabilities and CVEs
Gladinet Centrestack has 13 published vulnerabilities, 8 of them in the last 12 months. 4 are rated critical and 3 are listed by CISA as actively exploited.
CVEs13
Last 12 months8
Critical4
Actively exploited3
All vulnerabilities in the catalogue →⭐ Follow this technology
🔴 Actively exploited (CISA KEV)
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-14611 | High (7.1) | 53% | ⚠ Active exploitation | Dec 12, 2025 | Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and… |
| CVE-2025-11371 | High (7.5) | 92% | ⚠ Active exploitation | Oct 9, 2025 | In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this… |
| CVE-2025-30406 | Critical (9.8) | 94% | ⚠ Active exploitation | Apr 3, 2025 | Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This… |
Latest vulnerabilities
| CVE | Severity | EPSS | Active exploitation | Published | Description |
|---|---|---|---|---|---|
| CVE-2026-54368 | High (8.7) | 0.71% | — | Jul 30, 2026 | CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter… |
| CVE-2026-54367 | High (8.8) | 0.32% | — | Jul 30, 2026 | CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack… |
| CVE-2026-54366 | High (8.7) | 0.49% | — | Jul 30, 2026 | CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage… |
| CVE-2026-54365 | High (8.7) | 0.37% | — | Jul 30, 2026 | CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded… |
| CVE-2026-54364 | Medium (6.9) | 0.43% | — | Jul 30, 2026 | CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName… |
| CVE-2026-54363 | Critical (9.3) | 0.69% | — | Jul 30, 2026 | CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNumber value used as entropy for… |
| CVE-2025-14611 | High (7.1) | 53% | ⚠ Active exploitation | Dec 12, 2025 | Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and… |
| CVE-2025-11371 | High (7.5) | 92% | ⚠ Active exploitation | Oct 9, 2025 | In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this… |
| CVE-2025-30406 | Critical (9.8) | 94% | ⚠ Active exploitation | Apr 3, 2025 | Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This… |
| CVE-2024-37783 | Medium (5.4) | 0.38% | — | Nov 22, 2024 | A reflected cross-site scripting (XSS) vulnerability in Gladinet CentreStack v13.12.9934.54690 allows attackers to inject malicious JavaScript into the web browser of a victim via the sessionId parameter at… |
| CVE-2024-37782 | Critical (9.8) | 1.0% | — | Nov 22, 2024 | An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into the username field. |
| CVE-2023-26830 | High (7.2) | 1.1% | — | Mar 31, 2023 | An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to… |
| CVE-2023-26829 | Critical (9.8) | 1.2% | — | Mar 31, 2023 | An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous… |
🎯 How it gets exploited (ATT&CK techniques)
Number of CVEs of this technology mapped to each exploitation or primary-impact technique.