Vulnerabilities in Gladinet
15 resultsCVE-2025-30406CRITICALGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'EPSS 94.3%KEVCVE-2025-11371HIGHGladinet CentreStack and TrioFox Local File Inclusion FlawEPSS 92.1%KEVCVE-2025-14611HIGHGladinet CentreStack and TrioFox Hard Coded AES KeysEPSS 53.3%KEVCVE-2026-54368HIGHCentreStack < 17.4 SQL Injection via x-glad-filter HeaderEPSS 0.7%CVE-2026-54363CRITICALCentreStack < 17.5 Hardcoded Key Token Forgery RCEEPSS 0.7%CVE-2026-54366HIGHCentreStack < 17.4 XXE via SharePoint Storage ConfigurationEPSS 0.5%CVE-2026-8361HIGHGladinet Triofox Path Traversal in WOSDefaultHttpModule.dllEPSS 0.4%CVE-2026-54364MEDIUMCentreStack < 17.4 Session Injection via SelectProvider.aspxEPSS 0.4%CVE-2026-8363CRITICALGladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dllEPSS 0.4%CVE-2026-8362CRITICALGladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dllEPSS 0.4%CVE-2026-8364CRITICALGladinet Triofox Missing Authentication for Critical FunctionsEPSS 0.4%CVE-2026-54365HIGHCentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dllEPSS 0.4%CVE-2026-8360HIGHGladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOSEPSS 0.3%CVE-2026-8359HIGHGladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoSEPSS 0.3%CVE-2026-54367HIGHCentreStack < 17.2 Unauthenticated API Authorization BypassEPSS 0.3%