Vendor

    Gladinet

    18 known vulnerabilities in products by Gladinet, 4 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    4

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gladinet
    CriticalCVE-2025-14611

    Gladinet CentreStack and TrioFox Hard Coded AES Keys

    In CISA KEV

    		9.8
    CriticalCVE-2025-12480

    Gladinet Triofox Improper Access Control Vulnerability

    In CISA KEV

    		9.1
    CriticalCVE-2025-30406

    Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

    In CISA KEV

    		9.0
    CriticalCVE-2025-11371

    Gladinet CentreStack and TrioFox Local File Inclusion Flaw

    In CISA KEV

    		7.5
    CriticalCVE-2026-54363

    CentreStack < 17.5 Hardcoded Key Token Forgery RCE

    		9.1
    CriticalCVE-2023-26829

    Gladinet CentreStack: Authentication Bypass

    		9.8
    HighCVE-2026-54368

    CentreStack < 17.4 SQL Injection via x-glad-filter Header

    		8.8
    HighCVE-2026-54366

    CentreStack < 17.4 XXE via SharePoint Storage Configuration

    		7.5
    CriticalCVE-2026-8363

    Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll

    		9.8
    CriticalCVE-2026-8362

    Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll

    		9.8
    CriticalCVE-2026-8364

    Gladinet Triofox Missing Authentication for Critical Functions

    		9.8
    HighCVE-2026-54365

    CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll

    		7.5
    HighCVE-2023-26830

    Gladinet CentreStack: Unrestricted File Upload

    		7.2
    HighCVE-2026-54367

    CentreStack < 17.2 Unauthenticated API Authorization Bypass

    		8.6
    MediumCVE-2026-54364

    CentreStack < 17.4 Session Injection via SelectProvider.aspx

    		6.5
    HighCVE-2026-8361

    Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll

    		7.5
    HighCVE-2026-8360

    Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS

    		7.5
    HighCVE-2026-8359

    Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS

    		7.5

    News

    Products

    Products by Gladinet
    Gladinet CentreStack113
    Gladinet Triofox93