Skip to content
OpenAdvisories

Vendor

Gladinet

15 known vulnerabilities.

Products

CentreStack 7 Triofox 6 CentreStack and TrioFox 2
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.1
    CVE-2026-54363

    CentreStack < 17.5 Hardcoded Key Token Forgery RCE

    CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNumber value used as entropy for AccessTicket.Encrypt() and AccessTicket.Decrypt()…

    Gladinet CentreStack
  • Critical 9.8
    CVE-2026-8362

    Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll

    A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome

    Gladinet Triofox
  • Critical 9.8
    CVE-2026-8363

    Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll

    A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:

    Gladinet Triofox
  • Critical 9.8
    CVE-2026-8364

    Gladinet Triofox Missing Authentication for Critical Functions

    Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.

    Gladinet Triofox
  • Critical 9.0
    CVE-2025-30406 Exploited Public exploit Scanner template EPSS 95%

    Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to th…

    Gladinet CentreStack
    KEV Apr 8, 2025