Gladinet records
7 published records for vendor gladinet.
Researcher profile
- Entered KEV
- 4 · 57.1%
- Weaponized
- 4 · 57.1%
- Pre-auth RCE
- 2
- With a fix record
- 14.3%
- Median publish → KEV
- 4 days
Recurring classes
- CWE-284 Improper Access Control1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-552 Files or Directories Accessible to External Parties1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
97Now | CVE-2025-30406Weaponized | Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'gladinet · centrestack · CWE-321 | Critical9.8 | KEV | 94.3% | Apr 3, 2025 |
95Now | CVE-2025-12480Weaponized | Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages evengladinet · triofox · CWE-284 | Critical9.1 | KEV | 95.7% | Nov 10, 2025 |
88Now | CVE-2025-11371Weaponized | Gladinet CentreStack and TrioFox Local File Inclusion Flawgladinet · centrestack · CWE-552 | High7.5 | KEV | 92.1% | Oct 9, 2025 |
74This week | CVE-2025-14611Weaponized | Gladinet CentreStack and TrioFox Hard Coded AES Keysgladinet · centrestack · CWE-798 | High7.1 | KEV | 53.3% | Dec 12, 2025 |
39Monitor | CVE-2023-26829No exploit | An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to sgladinet · centrestack · CWE-863 | Critical9.8 | — | 1.1% | Mar 31, 2023 |
39Monitor | CVE-2024-37782No exploit | An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or exeCWE-77 | Critical9.8 | — | 1.0% | Nov 22, 2024 |
28Monitor | CVE-2023-26830No exploit | An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows augladinet · centrestack · CWE-434 | High7.2 | — | 1.0% | Mar 31, 2023 |
- CVE-2025-3040697Now
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal'
CriticalCVSS 9.8KEVWeaponizedEPSS 94%gladinet · centrestackApr 3, 2025
- CVE-2025-1248095Now
Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even
CriticalCVSS 9.1KEVWeaponizedEPSS 95%gladinet · triofoxNov 10, 2025
- CVE-2025-1137188Now
Gladinet CentreStack and TrioFox Local File Inclusion Flaw
HighCVSS 7.5KEVWeaponizedEPSS 92%gladinet · centrestackOct 9, 2025
- CVE-2025-1461174This week
Gladinet CentreStack and TrioFox Hard Coded AES Keys
HighCVSS 7.1KEVWeaponizedEPSS 53%gladinet · centrestackDec 12, 2025
- CVE-2023-2682939Monitor
An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to s
CriticalCVSS 9.8No exploitEPSS 1%gladinet · centrestackMar 31, 2023
- CVE-2024-3778239Monitor
An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers to access sensitive data or exe
CriticalCVSS 9.8No exploitEPSS 1%Nov 22, 2024
- CVE-2023-2683028Monitor
An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows au
HighCVSS 7.2No exploitEPSS 1%gladinet · centrestackMar 31, 2023