CVE-2026-54368: CentreStack < 17.4 SQL Injection via x-glad-filter Header

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-30 · updated 2026-10-23
Weakness: CWE-89

Description

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized interpolation of the Field parameter directly into SQL query strings to write arbitrary files to the server filesystem via PostgreSQL lo_from_bytea() and lo_export() functions, enabling remote code execution.

Affected products

Gladinet CentreStack: before 17.4 — fixed in 17.4

How to fix

Upgrade to a fixed version: Gladinet CentreStack 17.4. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-54368 or the next vulnerability affects your stack