CVEvulnerability
CVE-2023-26830
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2023-03-31
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.2 HIGH — CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-434
Description
An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server.
Affected configurations
• gladinet centrestack (< 13.5.9808)
Related
Weakness · CWE (1)
- CWE-434 Unrestricted Upload of File with Dangerous Type weakness
References
- https://www.whiteoaksecurity.com/blog/centrestack-disclosure/ Exploit, Third Party Advisory
- https://www.whiteoaksecurity.com/blog/centrestack-disclosure/ Exploit, Third Party Advisory