Arbitrary file upload in Gladinet Centrestack

CVE-2023-26830

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server.

Vulnerability class: Unrestricted File Upload

EPSS: 0.011 (61.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2023-26830?
CVE-2023-26830 is a high-severity vulnerability in Gladinet Centrestack, classified under Unrestricted Upload of File with Dangerous Type. CVSS score: 7.2/10. Published 2023-03-31.
How severe is CVE-2023-26830?
High severity. CVSS v3 base score is 7.2 out of 10.