Centrestack Security Vulnerabilities and Issues — Centrestack CVE List

Lucene search

GladinetCentrestack

3 matches found

CVE•added 2025/04/03 8:15 p.m.•213 views

CVE-2025-30406

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for server-side...

9.8CVSS8AI score0.84877EPSS

CVE•added 2024/11/22 6:15 p.m.•50 views

CVE-2024-37782

An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or execute arbitrary commands via a crafted payload injected into the username field.

9.8CVSS7.8AI score0.00211EPSS

CVE•added 2023/03/31 4:15 p.m.•31 views

CVE-2023-26829

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.

9.8CVSS9.6AI score0.00268EPSS