Gladinet CentreStack vulnerabilities
7 published CVEs name Gladinet CentreStack among the affected products; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 7
- Last 12 months
- 6
- Critical
- 2
- Known exploited
- 1
Critical 2High 4Medium 1Low 0Not scored 0
CVEs per yearBy the year they were published
- 20251
- 20266
Known exploitedNewest addition to KEV first
- CVE-2025-30406
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded…
Gladinet · CentreStack
ExploitedCritical9.0
Newest CVEs
- CVE-2026-54368
CentreStack < 17.4 SQL Injection via x-glad-filter Header
Gladinet · CentreStack
High8.7 - CVE-2026-54367
CentreStack < 17.2 Unauthenticated API Authorization Bypass
Gladinet · CentreStack
High8.8 - CVE-2026-54366
CentreStack < 17.4 XXE via SharePoint Storage Configuration
Gladinet · CentreStack
High8.7 - CVE-2026-54365
CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
Gladinet · CentreStack
High8.7 - CVE-2026-54364
CentreStack < 17.4 Session Injection via SelectProvider.aspx
Gladinet · CentreStack
Medium6.9 - CVE-2026-54363
CentreStack < 17.5 Hardcoded Key Token Forgery RCE
Gladinet · CentreStack
Critical9.3 - CVE-2025-30406
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded…
Gladinet · CentreStack
ExploitedCritical9.0