Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Gladinet Component: Centrestack Clear all filters
TI-2025-13351 CVE-2025-14611 · GHSA-j7r7-3wrm-f59w

Gladinet CentreStack and TrioFox Hard Coded AES Keys

Priority CRITICAL 90KEV

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme.

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.53302 Published 2025-12-12 Fixed in 16.12.10420.56791 CWE-798
TI-2025-10418 CVE-2025-11371 · GHSA-hj6h-fpv2-5h4v

Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Priority CRITICAL 90KEV

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92137 Published 2025-10-09 No fix listed CWE-552
TI-2025-21708 CVE-2025-30406 · GHSA-hgp9-3v5v-223j

Hard-coded credentials in Gladinet CentreStack

Priority CRITICAL 100KEV

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94343 Published 2025-04-03 Fixed in 16.4.10315.56368 CWE-321
TI-2023-11792 CVE-2023-26830 · GHSA-5j89-9926-36q5

An unrestricted file upload vulnerability in the administrative portal branding component…

Priority LOW 36

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01063 Published 2023-03-31 No fix listed CWE-434
TI-2023-11791 CVE-2023-26829 · GHSA-h55p-3mg5-547m

An authentication bypass vulnerability in the Password Reset component of Gladinet…

Priority MEDIUM 51

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01199 Published 2023-03-31 No fix listed CWE-863