Login Request a demo
CE
Product
CentreStack
by Gladinet · last CVE Jul 30, 2026
On CISA KEVExploited in the wild
11
CVEs
3
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news2Timeline
Severity mix
Critical 4High 6Medium 1Low 0
Severity
All severities11Critical4High6Medium1Low0
Exploitation
On CISA KEV3Exploited in the wild3
Watch

Add CentreStack to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-14611
In wildKEV
9.8
53%
Dec 12
Gladinet CentreStack and TrioFox Hard Coded AES Keys
Affected: before 16.12.10420.56791
CVE-2025-30406
In wildKEV
9.8
94%
Apr 3
Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Affected: before 16.4.10315.56368
CVE-2025-11371
In wildKEV
7.5
92%
Oct 9
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
Affected: before 16.10.10408.56683
CVE-2023-26829
9.8
1%
Mar 31
An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user…
Affected: before 13.5.9808
CVE-2026-54363
9.1
1%
Jul 30
CentreStack < 17.5 Hardcoded Key Token Forgery RCE
Affected: before 17.5
CVE-2026-54368
8.8
1%
Jul 30
CentreStack < 17.4 SQL Injection via x-glad-filter Header
Affected: before 17.4
CVE-2026-54367
8.6
0%
Jul 30
CentreStack < 17.2 Unauthenticated API Authorization Bypass
Affected: before 17.2
CVE-2026-54366
7.5
0%
Jul 30
CentreStack < 17.4 XXE via SharePoint Storage Configuration
Affected: before 17.4
CVE-2026-54365
7.5
0%
Jul 30
CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
Affected: before 17.3
CVE-2023-26830
7.2
1%
Mar 31
An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute…
Affected: before 13.5.9808
CVE-2026-54364
6.5
0%
Jul 30
CentreStack < 17.4 Session Injection via SelectProvider.aspx
Affected: before 17.4
Showing 11