Gladinet Centrestack — known CVE vulnerabilities

Every CVE whose affected-product data names Gladinet Centrestack, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2023-26829 — CVSS 9.8 (critical): An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to…
• CVE-2025-14611 — CVSS 9.8 (critical) — actively exploited: Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme…
• CVE-2025-30406 — CVSS 9.0 (critical) — actively exploited: Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack…
• CVE-2025-11371 — CVSS 7.5 (high) — actively exploited: In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw…
• CVE-2023-26830 — CVSS 7.2 (high): An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows…