What’s Vulnerable › Products
Gladinet CentreStack vulnerabilities
12 known vulnerabilities, 3 confirmed exploited in the wild (CISA KEV), 10 published in the last 12 months.
Check whether your Gladinet CentreStack version is affected
Exploited Gladinet CentreStack vulnerabilities
- CVE-2025-14611 — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
- CVE-2025-11371 — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
- CVE-2025-30406 — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Latest Gladinet CentreStack vulnerabilities
- CVE-2026-54368 — CentreStack < 17.4 SQL Injection via x-glad-filter Header (CVSS 8.8)
- CVE-2026-54367 — CentreStack < 17.2 Unauthenticated API Authorization Bypass (CVSS 8.6)
- CVE-2026-54366 — CentreStack < 17.4 XXE via SharePoint Storage Configuration (CVSS 7.5)
- CVE-2026-54365 — CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll (CVSS 7.5)
- CVE-2026-54364 — CentreStack < 17.4 Session Injection via SelectProvider.aspx (CVSS 6.5)
- CVE-2026-54363 — CentreStack < 17.5 Hardcoded Key Token Forgery RCE (CVSS 9.1)
- CVE-2025-14611 — Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability (CVSS 9.8) — exploited
- CVE-2025-11371 — Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability (CVSS 7.5) — exploited
- CVE-2025-30406 — Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability (CVSS 9.8) — exploited
- CVE-2024-37782 — (CVSS 9.8)
- CVE-2023-26830 — (CVSS 7.2)
- CVE-2023-26829 — (CVSS 9.8)