DeutschShown in its original language — a full translation is planned for a future version.
Gladinet CentreStack: Mehrere Schwachstellen
view advisory published 2026-07-30
Ein Angreifer kann mehrere Schwachstellen in Gladinet CentreStack ausnutzen, um beliebigen Programmcode auszuführen,SQL-Injection durchzuführen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und vertrauliche Informationen offenzulegen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2026-54368US | — | — | ||
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements… | ||||
| CVE-2026-54367US | —OT elevated | — | ||
CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exp… | ||||
| CVE-2026-54366US | — | — | ||
CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthenticated attackers to exfiltrate arbitrary files by supplying a malicious U… | ||||
| CVE-2026-54365US | —OT elevated | — | ||
CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user account… | ||||
| CVE-2026-54364US | — | — | ||
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab… | ||||
| CVE-2026-54363US | —OT elevated | — | ||
CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNum… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Security Advisory vom 2026-07-30external
- GitHub Security Advisory vom 2026-07-30external
- GitHub Security Advisory vom 2026-07-30external
- GitHub Security Advisory vom 2026-07-30external
- GitHub Security Advisory vom 2026-07-30external
- GitHub Security Advisory vom 2026-07-30external
- WID-SEC-W-2026-2607 - CSAF Versionself
- WID-SEC-2026-2607 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan