Latest Gladinet CentreStack vulnerability: CVE-2025-30406 #
Gladinet has disclosed a vulnerability in their CentreStack collaboration product that could allow an attacker to execute arbitrary code on vulnerable systems. This is due to a hard-coded cryptographic key present in these systems.
This vulnerability has been assigned CVE-2025-30406 and has been given a CVSS score of 9.0 (critical).
What is the impact? #
An attacker with knowledge of the hard-coded cryptographic key could craft a malicious serialized payload that would be implicitly trusted by the vulnerable system and executed with full privileges.
Versions of CentreStack prior to 16.4.10315.56368 are vulnerable. There is evidence that this vulnerability is being actively exploited in the wild.
Are updates or workarounds available? #
Gladinet has released updates that address these vulnerabilities and users are advised to upgrade as quickly as possible. Administrators can also replace the hard-coded key in the "web.config" file of vulnerable servers.
How do I find potentially vulnerable systems with runZero? #
From the Service Inventory, use the following query to locate systems running potentially vulnerable software:
product:CentreStack OR (_asset.protocol:http AND protocol:http AND html.title:"CentreStack")
