Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Gladinet CentreStack 17.4 Clear all filters
TI-2026-39260 CVE-2026-54368 · GHSA-4cmj-5m56-fg8c

CentreStack < 17.4 SQL Injection via x-glad-filter Header

Priority MEDIUM 41

CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter re…

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00706 Published 2026-07-30 Fixed in 17.4 CWE-89
TI-2026-39258 CVE-2026-54366 · GHSA-m68w-g32j-mw5x

CentreStack < 17.4 XXE via SharePoint Storage Configuration

Priority MEDIUM 44

CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious URL to the SharePoint storage configurati…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00486 Published 2026-07-30 Fixed in 17.4 CWE-611
TI-2026-39256 CVE-2026-54364 · GHSA-g6j6-rqg9-wq7x

CentreStack < 17.4 Session Injection via SelectProvider.aspx

Priority LOW 37

CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName p…

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00427 Published 2026-07-30 Fixed in 17.4 CWE-116