Vulnerabilidades em Gladinet

15 resultados

Análise Vexday

Gladinet apresenta 9 vulnerabilidades catalogadas, com 3 sob ataque ativo e 4 críticas em CVSS, indicando risco imediato. A maioria das falhas (6 das 9) foi publicada nos últimos 90 dias, sugerindo exposição recente de um componente legado; a fraqueza dominante é buffer overflow (CWE-121), um vetor clássico mas ainda efetivo. A combinação de ataques em curso e publicações recentes exige atenção prioritária em inventários que rodem este fornecedor.

CVE-2025-30406CRITICALGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'EPSS 93.8%KEV CVE-2025-11371HIGHGladinet CentreStack and TrioFox Local File Inclusion FlawEPSS 92.1%KEV CVE-2025-14611HIGHGladinet CentreStack and TrioFox Hard Coded AES KeysEPSS 50.9%KEV CVE-2026-54363CRITICALCentreStack < 17.5 Hardcoded Key Token Forgery RCEEPSS 0.4%CVE-2026-54368HIGHCentreStack < 17.4 SQL Injection via x-glad-filter HeaderEPSS 0.4%CVE-2026-8361HIGHGladinet Triofox Path Traversal in WOSDefaultHttpModule.dllEPSS 0.4%CVE-2026-8363CRITICALGladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dllEPSS 0.3%CVE-2026-8362CRITICALGladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dllEPSS 0.3%CVE-2026-8364CRITICALGladinet Triofox Missing Authentication for Critical FunctionsEPSS 0.3%CVE-2026-54366HIGHCentreStack < 17.4 XXE via SharePoint Storage ConfigurationEPSS 0.3%CVE-2026-8359HIGHGladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoSEPSS 0.3%CVE-2026-8360HIGHGladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOSEPSS 0.3%CVE-2026-54364MEDIUMCentreStack < 17.4 Session Injection via SelectProvider.aspxEPSS 0.3%CVE-2026-54365HIGHCentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dllEPSS 0.2%CVE-2026-54367HIGHCentreStack < 17.2 Unauthenticated API Authorization BypassEPSS 0.2%