Gladinet Centrestack vulnerabilities

• gladinet centrestack CentreStack < 17.4 SQL Injection via x-glad-filter Header CVE-2026-54368 8.7 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.2 Unauthenticated API Authorization Bypass CVE-2026-54367 8.8 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.4 XXE via SharePoint Storage Configuration CVE-2026-54366 8.7 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll CVE-2026-54365 8.7 HighJuly 30, 2026
• gladinet centrestack CentreStack < 17.4 Session Injection via SelectProvider.aspx CVE-2026-54364 6.9 MediumJuly 30, 2026
• gladinet centrestack CentreStack < 17.5 Hardcoded Key Token Forgery RCE CVE-2026-54363 9.3 CriticalJuly 30, 2026
• gladinet centrestack, centrestack and triofox, triofox +2 more Gladinet CentreStack and TrioFox Hard Coded AES Keys CVE-2025-14611 In KEVPublic exploit EPSS 53.3% 7.1 HighDecember 12, 2025
• gladinet centrestack, centrestack and triofox, triofox +2 more Gladinet CentreStack and TrioFox Local File Inclusion Flaw CVE-2025-11371 In KEVPublic exploit EPSS 92.1% 7.5 HighOctober 9, 2025
• gladinet centrestack Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization... CVE-2025-30406 In KEVPublic exploit EPSS 94.3% 9.0 CriticalApril 3, 2025
• gladinet centrestack An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690... CVE-2024-37782 9.8 CriticalNovember 22, 2024
• gladinet centrestack An unrestricted file upload vulnerability in the administrative portal branding component of... CVE-2023-26830 7.2 HighMarch 31, 2023
• gladinet centrestack An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack... CVE-2023-26829 9.8 CriticalMarch 31, 2023