Skip to main content

Gladinet CentreStack CVE-2026-54367

| EUVDEUVD-2026-51103 HIGH
Missing Authentication for Critical Function (CWE-306)
2026-07-30 VulnCheck GHSA-hq66-5q6c-849x
Authentication Bypass Centrestack
8.8
CVSS 4.0 · Vendor: VulnCheck
Share

Severity by source

Vendor (VulnCheck) PRIMARY
8.8 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
8.6 HIGH

Unauthenticated network endpoint with no user interaction gives AV:N/AC:L/PR:N/UI:N; arbitrary write/delete of settings drives I:H while enumeration yields C:L and A:L.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (VulnCheck).

CVSS VectorVendor: VulnCheck

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

3
Patch available
Jul 30, 2026 - 14:03 EUVD
Analysis Generated
Jul 30, 2026 - 13:21 vuln.today
CVE Published
Jul 30, 2026 - 12:26 cve.org
HIGH 8.8

DescriptionCVE.org

CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers to read, write, or delete arbitrary account settings by exploiting exposed API endpoints that lack authorization checks. Attackers can generate valid encrypted EntAcctId values using the static shared encryption key to forge identifiers for any user GUID, including the system-wide cluster settings account, enabling enumeration of hosted tenant domains and administrator identities.

AnalysisAI

Authentication bypass in Gladinet CentreStack before 17.2 lets unauthenticated remote attackers read, write, and delete arbitrary account settings by hitting API endpoints that lack authorization checks (CWE-306). Because a static shared encryption key is used to generate valid encrypted EntAcctId values, an attacker can forge identifiers for any user GUID - including the system-wide cluster settings account - to enumerate hosted tenant domains and administrator identities. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Reach CentreStack API over network
Delivery
Derive EntAcctId via static key
Exploit
Forge cluster settings account ID
Execution
Call unauthorized settings endpoint
Persist
Enumerate tenants and admin identities
Impact
Read/write/delete account settings
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires network reachability to the CentreStack API endpoints and knowledge/derivation of the static shared encryption key used to produce valid encrypted EntAcctId values; with that key, an attacker forges identifiers for any user GUID, including the system-wide cluster settings account. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The supplied CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:H/VA:L) describes a network-reachable, low-complexity, unauthenticated attack with high integrity impact and lower confidentiality/availability impact, scoring 8.8 (High). … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker who can reach a CentreStack instance over the network derives valid encrypted EntAcctId values using the static shared key, then calls the unauthenticated settings API to forge the identifier of the cluster settings account. From there they enumerate all hosted tenant domains and administrator identities and can modify or delete account settings, laying groundwork for tenant takeover - all without valid credentials and with low attack complexity (AV:N/AC:L/PR:N). …
Remediation Vendor-released patch: 17.2 - upgrade all CentreStack instances to version 17.2 or later, which is the primary and authoritative fix. … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours, identify and document all Gladinet CentreStack deployments with version confirmation; restrict network access to CentreStack API endpoints to authorized IP ranges only. …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Centrestack

View all
CVE-2025-30406 CRITICAL POC
9.0 Apr 03

Gladinet CentreStack contains a deserialization vulnerability caused by a hardcoded machineKey in the portal, allowing u
CVE-2023-26829 CRITICAL POC
9.8 Mar 31

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows r
CVE-2023-26830 HIGH POC
7.2 Mar 31

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before
CVE-2026-54363 CRITICAL
9.3 Jul 30

Unauthenticated remote code execution in Gladinet CentreStack before 17.5 stems from a hardcoded cryptographic key (a st
CVE-2026-54365 HIGH
8.7 Jul 30

Unauthenticated OS user-account creation in Gladinet CentreStack before 17.3 lets remote attackers abuse an insecure des
CVE-2026-54368 HIGH
8.7 Jul 30

SQL injection leading to remote code execution in Gladinet CentreStack before 17.4 lets authenticated users inject arbit
CVE-2026-54366 HIGH
8.7 Jul 30

Out-of-band file exfiltration in Gladinet CentreStack before 17.4 lets unauthenticated remote attackers read arbitrary s
CVE-2026-54364 MEDIUM
6.9 Jul 30

Session variable injection in Gladinet CentreStack before version 17.4 allows unauthenticated remote attackers to bypass

Same weakness CWE-306 – Missing Authentication for Critical Function

View all
CVE-2024-0012 CRITICAL POC
9.3
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2024-11680 CRITICAL POC
9.8
CVE-2024-51567 CRITICAL POC
9.8
CVE-2025-0108 HIGH POC
8.8
CVE-2025-32433 CRITICAL POC
10.0
CVE-2016-2004 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-54367 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy