G
Vendor security profile4 actively exploited CVEs
Gladinet
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs10
Critical2
CISA KEV4
Public exploit4
Patch rate%0
Avg. CVSS8.6
12-month vulnerability rate
1
1
0
0
0
0
0
0
6
0
0
0
CVE KEV
CVE severity distribution
10toplam CVE
Critical2 (20%)
High5 (50%)
Medium1 (10%)
Uncertain2 (20%)
Patch and exploitation view
%0
Verified patch
%40
CISA KEV
%40
Public exploit
0Patch available
0Partial
4Workaround
0Vendor: no patch
6Unknown
Latest vulnerabilities
8.7
CVE-2026-54368CentreStack < 17.4 SQL Injection via x-glad-filter Header
Patch status unknownEPSS %1
8.8
CVE-2026-54367CentreStack < 17.2 Unauthenticated API Authorization Bypass
Patch status unknownEPSS %0
8.7
CVE-2026-54366CentreStack < 17.4 XXE via SharePoint Storage Configuration
Patch status unknownEPSS %0
6.9
CVE-2026-54364CentreStack < 17.4 Session Injection via SelectProvider.aspx
Patch status unknownEPSS %0
9.3
CVE-2026-54363CentreStack < 17.5 Hardcoded Key Token Forgery RCE
Patch status unknownEPSS %1
9.8
CVE-2025-14611 Actively exploitedUse of hard-coded credentials in Gladinet Centrestack
Workaround Public Exploits:2EPSS %53
-
CVE-2025-12480 Actively exploitedGladinet Triofox Improper Access Control Vulnerability
Workaround Public Exploits:1EPSS %96
7.5
CVE-2025-11371 Actively exploitedGladinet CentreStack and TrioFox Local File Inclusion Flaw
Workaround Public Exploits:1EPSS %92
-
CVE-2025-30406 Actively exploitedGladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Workaround Public Exploits:1EPSS %94