Gladinet vulnerabilities

Products

• Centrestack 12
• Triofox 9
• Centrestack And Triofox 2

Newest

• gladinet centrestack CentreStack < 17.4 SQL Injection via x-glad-filter Header CVE-2026-54368 8.7 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.2 Unauthenticated API Authorization Bypass CVE-2026-54367 8.8 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.4 XXE via SharePoint Storage Configuration CVE-2026-54366 8.7 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll CVE-2026-54365 8.7 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.4 Session Injection via SelectProvider.aspx CVE-2026-54364 6.9 MediumJuly 30, 2026
• gladinet centrestack CentreStack < 17.5 Hardcoded Key Token Forgery RCE CVE-2026-54363 9.3 CriticalJuly 30, 2026
• gladinet triofox Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS CVE-2026-8359 7.5 HighMay 27, 2026
• gladinet triofox Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS CVE-2026-8360 7.5 HighMay 27, 2026
• gladinet triofox Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll CVE-2026-8361 7.5 HighMay 27, 2026
• gladinet triofox Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll CVE-2026-8362 9.8 CriticalMay 27, 2026
• gladinet triofox Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll CVE-2026-8363 9.8 CriticalMay 27, 2026
• gladinet triofox Gladinet Triofox Missing Authentication for Critical Functions CVE-2026-8364 9.8 CriticalMay 27, 2026
• gladinet centrestack, centrestack and triofox, triofox +2 more Gladinet CentreStack and TrioFox Hard Coded AES Keys CVE-2025-14611 In KEVPublic exploit EPSS 53.3% 7.1 HighDecember 12, 2025
• gladinet triofox Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw... CVE-2025-12480 In KEV EPSS 95.7% 9.1 CriticalNovember 10, 2025
• gladinet centrestack, centrestack and triofox, triofox +2 more Gladinet CentreStack and TrioFox Local File Inclusion Flaw CVE-2025-11371 In KEVPublic exploit EPSS 92.1% 7.5 HighOctober 9, 2025
• gladinet centrestack Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization... CVE-2025-30406 In KEVPublic exploit EPSS 94.3% 9.0 CriticalApril 3, 2025
• gladinet centrestack An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690... CVE-2024-37782 9.8 CriticalNovember 22, 2024
• gladinet centrestack An unrestricted file upload vulnerability in the administrative portal branding component of... CVE-2023-26830 7.2 HighMarch 31, 2023
• gladinet centrestack An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack... CVE-2023-26829 9.8 CriticalMarch 31, 2023