CVE-2023-26829: Incorrect Authorization

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass...

CVE-2023-26830: Unrestricted Upload of File with Dangerous Type

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server...

PT-2023-20811

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack versions prior to 13.5.9808 Description An authentication bypass issue in the Password Reset component allows remote attackers to set a new password for any valid user account without needing the previous known password,...

CVE-2023-26830

CVE-2023-26830 covers an unrestricted file upload flaw in the Gladinet CentreStack administrative portal branding component, affecting versions prior to 13.5.9808 . The vulnerability allows an authenticated attacker to upload malicious files to the server and execute arbitrary code. The issue is ...