Gladinet

Products

Exploited and recent CVEs

• CVE-2025-14611 High 7.1 Exploited Gladinet CentreStack and TrioFox Hard Coded AES Keys 53.3%
• CVE-2025-11371 High 7.5 Exploited Gladinet CentreStack and TrioFox Local File Inclusion Flaw 92.1%
• CVE-2025-30406 Critical 9.0 Exploited Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in Marc 94.3%
• CVE-2026-54368 High 8.8 CentreStack < 17.4 SQL Injection via x-glad-filter Header 0.7%
• CVE-2026-54367 High 8.6 CentreStack < 17.2 Unauthenticated API Authorization Bypass 0.3%
• CVE-2026-54366 High 7.5 CentreStack < 17.4 XXE via SharePoint Storage Configuration 0.5%
• CVE-2026-54365 High 7.5 CentreStack < 17.3 Unauthenticated User Creation via Deserialization in GSNamespace.dll 0.4%
• CVE-2026-54364 Medium 6.5 CentreStack < 17.4 Session Injection via SelectProvider.aspx 0.4%
• CVE-2026-54363 Critical 9.1 CentreStack < 17.5 Hardcoded Key Token Forgery RCE 0.7%
• CVE-2026-8359 High 7.5 Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS 0.3%
• CVE-2026-8360 High 7.5 Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS 0.3%
• CVE-2026-8361 High 7.5 Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll 0.4%
• CVE-2026-8362 Critical 9.8 Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll 0.4%
• CVE-2026-8363 Critical 9.8 Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll 0.4%
• CVE-2026-8364 Critical 9.8 Gladinet Triofox Missing Authentication for Critical Functions 0.4%