CVE-2026-54364: Improper Encoding or Escaping of Output in Gladinet CentreStack
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit the lack of input sanitization in the custom session serialization format to inject a resellerid session variable, bypassing the IsValidRSession authentication check and gaining unauthorized access to management pages.
AI Analysis
Technical Summary
CVE-2026-54364 describes a session variable injection vulnerability in Gladinet CentreStack versions prior to 17.4. The vulnerability arises from improper encoding or escaping of output in the custom session serialization format. Specifically, attackers can craft an AccountName parameter containing newline and tab characters posted to the SelectProvider.aspx endpoint, enabling injection of a resellerid session variable. This injection bypasses the IsValidRSession authentication check, granting unauthorized access to management pages without authentication.
Potential Impact
An unauthenticated attacker can exploit this vulnerability to inject session variables and bypass authentication controls, leading to unauthorized access to management pages within CentreStack. This could allow attackers to perform administrative actions or access sensitive management functions without proper authorization.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor Gladinet's advisories for updates. Until a patch is available, consider restricting access to the SelectProvider.aspx endpoint or implementing additional input validation and filtering on the AccountName parameter as a temporary mitigation.
CVE-2026-54364: Improper Encoding or Escaping of Output in Gladinet CentreStack
Description
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit the lack of input sanitization in the custom session serialization format to inject a resellerid session variable, bypassing the IsValidRSession authentication check and gaining unauthorized access to management pages.
CVSS v4.0
Score 6.9medium
Affected software
pkg:github/gladinet/centrestackRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-54364 describes a session variable injection vulnerability in Gladinet CentreStack versions prior to 17.4. The vulnerability arises from improper encoding or escaping of output in the custom session serialization format. Specifically, attackers can craft an AccountName parameter containing newline and tab characters posted to the SelectProvider.aspx endpoint, enabling injection of a resellerid session variable. This injection bypasses the IsValidRSession authentication check, granting unauthorized access to management pages without authentication.
Potential Impact
An unauthenticated attacker can exploit this vulnerability to inject session variables and bypass authentication controls, leading to unauthorized access to management pages within CentreStack. This could allow attackers to perform administrative actions or access sensitive management functions without proper authorization.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch information is provided, users should monitor Gladinet's advisories for updates. Until a patch is available, consider restricting access to the SelectProvider.aspx endpoint or implementing additional input validation and filtering on the AccountName parameter as a temporary mitigation.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulnCheck
- Date Reserved
- 2026-06-12T20:20:02.947Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a6b49199c2644c7f816bfca
Added to database: 07/30/2026, 12:52:41 UTC
Last enriched: 07/30/2026, 13:09:45 UTC
Last updated: 07/30/2026, 13:50:20 UTC
Views: 5
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.