Product by Gladinet

    Gladinet CentreStack

    11 known vulnerabilities in Gladinet CentreStack (Gladinet), 3 of them actively exploited (CISA KEV).

    Key figures

    11

    Vulnerabilities

    3

    Actively exploited (KEV)

    0

    Used by ransomware

    5

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Gladinet CentreStack (Gladinet)
    CriticalCVE-2025-14611

    Gladinet CentreStack and TrioFox Hard Coded AES Keys

    In CISA KEValso in 1 other product

    		9.8
    CriticalCVE-2025-30406

    Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability

    In CISA KEV

    		9.0
    CriticalCVE-2025-11371

    Gladinet CentreStack and TrioFox Local File Inclusion Flaw

    In CISA KEValso in 1 other product

    		7.5
    CriticalCVE-2026-54363

    CentreStack < 17.5 Hardcoded Key Token Forgery RCE

    		9.1
    CriticalCVE-2023-26829

    Gladinet CentreStack: Authentication Bypass

    		9.8
    HighCVE-2026-54368

    CentreStack < 17.4 SQL Injection via x-glad-filter Header

    		8.8
    HighCVE-2026-54366

    CentreStack < 17.4 XXE via SharePoint Storage Configuration

    		7.5
    HighCVE-2026-54365

    CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll

    		7.5
    HighCVE-2023-26830

    Gladinet CentreStack: Unrestricted File Upload

    		7.2
    HighCVE-2026-54367

    CentreStack < 17.2 Unauthenticated API Authorization Bypass

    		8.6
    MediumCVE-2026-54364

    CentreStack < 17.4 Session Injection via SelectProvider.aspx

    		6.5

    News

    All products by Gladinet