GL
Vendor
Gladinet
22
CVEs
8
On KEV
0
New 30D
Products
CE9.8
CentreStack
Gladinet
11 CVEs3 on KEV0 new
TR9.8
Triofox
Gladinet
9 CVEs3 on KEV0 new
CA9.8
CentreStack and Triofox
Gladinet
2 CVEs2 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-54368 | CE CentreStack Gladinet | 8.8 | Jul 30 | CentreStack < 17.4 SQL Injection via x-glad-filter Header |
| CVE-2026-54367 | CE CentreStack Gladinet | 8.6 | Jul 30 | CentreStack < 17.2 Unauthenticated API Authorization Bypass |
| CVE-2026-54366 | CE CentreStack Gladinet | 7.5 | Jul 30 | CentreStack < 17.4 XXE via SharePoint Storage Configuration |
| CVE-2026-54365 | CE CentreStack Gladinet | 7.5 | Jul 30 | CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll |
| CVE-2026-54364 | CE CentreStack Gladinet | 6.5 | Jul 30 | CentreStack < 17.4 Session Injection via SelectProvider.aspx |
| CVE-2026-54363 | CE CentreStack Gladinet | 9.1 | Jul 30 | CentreStack < 17.5 Hardcoded Key Token Forgery RCE |
| CVE-2026-8359 | TR Triofox Gladinet | 7.5 | May 27 | Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS |
| CVE-2026-8360 | TR Triofox Gladinet | 7.5 | May 27 | Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS |
| CVE-2026-8361 | TR Triofox Gladinet | 7.5 | May 27 | Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll |
| CVE-2026-8362 | TR Triofox Gladinet | 9.8 | May 27 | Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll |
| CVE-2026-8363 | TR Triofox Gladinet | 9.8 | May 27 | Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll |
| CVE-2026-8364 | TR Triofox Gladinet | 9.8 | May 27 | Gladinet Triofox Missing Authentication for Critical Functions |
| CVE-2025-14611 In wildKEV | CA CentreStack and TrioFox Gladinet | 9.8 | Dec 12 | Gladinet CentreStack and TrioFox Hard Coded AES Keys |
| CVE-2025-12480 In wildKEV | TR Triofox Gladinet | 9.1 | Nov 10 | Gladinet Triofox Improper Access Control Vulnerability |
| CVE-2025-11371 In wildKEV | CA CentreStack and TrioFox Gladinet | 7.5 | Oct 9 | Gladinet CentreStack and TrioFox Local File Inclusion Flaw |
| CVE-2025-30406 In wildKEV | CE CentreStack Gladinet | 9.8 | Apr 3 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability |
| CVE-2023-26830 | CE Centrestack Gladinet | 7.2 | Mar 31 | An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute… |
| CVE-2023-26829 | CE Centrestack Gladinet | 9.8 | Mar 31 | An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user… |