Latest Gladinet CentreStack vulnerability: CVE-2025-30406 #

Gladinet has disclosed a vulnerability in their CentreStack collaboration product that could allow an attacker to execute arbitrary code on vulnerable systems. This is due to a hard-coded cryptographic key present in these systems.

This vulnerability has been assigned CVE-2025-30406 and has been given a CVSS score of 9.0 (critical).

What is the impact? #

An attacker with knowledge of the hard-coded cryptographic key could craft a malicious serialized payload that would be implicitly trusted by the vulnerable system and executed with full privileges.

Versions of CentreStack prior to 16.4.10315.56368 are vulnerable. There is evidence that this vulnerability is being actively exploited in the wild.

Are updates or workarounds available? #

Gladinet has released updates that address these vulnerabilities and users are advised to upgrade as quickly as possible. Administrators can also replace the hard-coded key in the "web.config" file of vulnerable servers.

How do I find potentially vulnerable systems with runZero? #

From the Service Inventory, use the following query to locate systems running potentially vulnerable software:

product:CentreStack OR (_asset.protocol:http AND protocol:http AND html.title:"CentreStack")

Written by Rob King

Rob King is the Director of Security Research at runZero. Over his career Rob has served as a senior researcher with KoreLogic, the architect for TippingPoint DVLabs, and helped get several startups off the ground. Rob helped design SC Magazine's Data Leakage Prevention Product of the Year for 2010, and was awarded the 3Com Innovator of the Year Award in 2009. He has been invited to speak at BlackHat, Shmoocon, SANS Network Security, and USENIX.

More about Rob King
Subscribe Now

Get the latest news and expert insights delivered in your inbox.

Welcome to the club! Your subscription to our newsletter is successful.

See Results in Minutes

See & secure your total attack surface. Even the unknowns & unmanageable.

Discover the new era of exposure management!