# cve.now: Gladinet

The newest entries naming Gladinet as an affected vendor (up to 200), of 15 in all, 3 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-54368](https://cve.now/CVE-2026-54368.md): CentreStack \< 17.4 SQL Injection via x-glad-filter Header (CVSS 8.7)
- [CVE-2026-54367](https://cve.now/CVE-2026-54367.md): CentreStack \< 17.2 Unauthenticated API Authorization Bypass (CVSS 8.8)
- [CVE-2026-54366](https://cve.now/CVE-2026-54366.md): CentreStack \< 17.4 XXE via SharePoint Storage Configuration (CVSS 8.7)
- [CVE-2026-54365](https://cve.now/CVE-2026-54365.md): CentreStack \< 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll (CVSS 8.7)
- [CVE-2026-54364](https://cve.now/CVE-2026-54364.md): CentreStack \< 17.4 Session Injection via SelectProvider.aspx (CVSS 6.9)
- [CVE-2026-54363](https://cve.now/CVE-2026-54363.md): CentreStack \< 17.5 Hardcoded Key Token Forgery RCE (CVSS 9.3)
- [CVE-2026-8359](https://cve.now/CVE-2026-8359.md): Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS (CVSS 7.5)
- [CVE-2026-8360](https://cve.now/CVE-2026-8360.md): Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS (CVSS 7.5)
- [CVE-2026-8361](https://cve.now/CVE-2026-8361.md): Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll (CVSS 7.5)
- [CVE-2026-8362](https://cve.now/CVE-2026-8362.md): Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll (CVSS 9.8)
- [CVE-2026-8363](https://cve.now/CVE-2026-8363.md): Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll (CVSS 9.8)
- [CVE-2026-8364](https://cve.now/CVE-2026-8364.md): Gladinet Triofox Missing Authentication for Critical Functions (CVSS 9.8)
- [CVE-2025-14611](https://cve.now/CVE-2025-14611.md): Gladinet CentreStack and TrioFox Hard Coded AES Keys (CVSS 7.1, KEV)
- [CVE-2025-11371](https://cve.now/CVE-2025-11371.md): Gladinet CentreStack and TrioFox Local File Inclusion Flaw (CVSS 7.5, KEV)
- [CVE-2025-30406](https://cve.now/CVE-2025-30406.md): Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal' (CVSS 9.0, KEV)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/gladinet
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.