Gladinet vulnerabilities
15 CVEs and advisories name Gladinet as an affected vendor, 3 of them on CISA's Known Exploited Vulnerabilities catalog, newest first. Follow it as a feed.
- CVE-2026-54368CentreStack < 17.4 SQL Injection via x-glad-filter Header
- CVE-2026-54367CentreStack < 17.2 Unauthenticated API Authorization Bypass
- CVE-2026-54366CentreStack < 17.4 XXE via SharePoint Storage Configuration
- CVE-2026-54365CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll
- CVE-2026-54364CentreStack < 17.4 Session Injection via SelectProvider.aspx
- CVE-2026-54363CentreStack < 17.5 Hardcoded Key Token Forgery RCE
- CVE-2026-8359Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS
- CVE-2026-8360Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
- CVE-2026-8361Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll
- CVE-2026-8362Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll
- CVE-2026-8363Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll
- CVE-2026-8364Gladinet Triofox Missing Authentication for Critical Functions
- CVE-2025-14611Gladinet CentreStack and TrioFox Hard Coded AES Keys
- CVE-2025-11371Gladinet CentreStack and TrioFox Local File Inclusion Flaw
- CVE-2025-30406Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'