Gladinet vulnerabilities
15 published CVEs name Gladinet among the affected products; CISA lists 3 of them as exploited in the wild.
- Published CVEs
- 15
- Last 12 months
- 13
- Critical
- 5
- Known exploited
- 3
Critical 5High 9Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20253
- 202612
Known exploitedNewest addition to KEV first
- CVE-2025-14611
Gladinet CentreStack and TrioFox Hard Coded AES Keys
Gladinet · CentreStack and TrioFox
ExploitedHigh7.1 - CVE-2025-11371
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
Gladinet · CentreStack and TrioFox
ExploitedHigh7.5 - CVE-2025-30406
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded…
Gladinet · CentreStack
ExploitedCritical9.0
Newest CVEs
- CVE-2026-54368
CentreStack < 17.4 SQL Injection via x-glad-filter Header
Gladinet · CentreStack
High8.7 - CVE-2026-54367
CentreStack < 17.2 Unauthenticated API Authorization Bypass
Gladinet · CentreStack
High8.8 - CVE-2026-54366
CentreStack < 17.4 XXE via SharePoint Storage Configuration
Gladinet · CentreStack
High8.7 - CVE-2026-54365
CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
Gladinet · CentreStack
High8.7 - CVE-2026-54364
CentreStack < 17.4 Session Injection via SelectProvider.aspx
Gladinet · CentreStack
Medium6.9 - CVE-2026-54363
CentreStack < 17.5 Hardcoded Key Token Forgery RCE
Gladinet · CentreStack
Critical9.3 - CVE-2026-8359
Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS
Gladinet · Triofox
High7.5 - CVE-2026-8360
Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
Gladinet · Triofox
High7.5 - CVE-2026-8361
Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll
Gladinet · Triofox
High7.5 - CVE-2026-8362
Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll
Gladinet · Triofox
Critical9.8