CVE-2026-54367 is an authentication bypass vulnerability in Gladinet CentreStack versions prior to 17.2. It arises from exposed API endpoints that do not enforce authorization checks, allowing unauthenticated attackers to manipulate account settings arbitrarily. Attackers can generate valid encrypted EntAcctId values by exploiting a static shared encryption key, enabling them to forge identifiers for any user GUID, including privileged system accounts. This flaw permits enumeration of tenant domains and administrator identities, increasing the risk of unauthorized access and potential data manipulation. The vulnerability is rated high severity with a CVSS 4.0 score of 8.8. No vendor advisory or patch information is currently available.

Unauthenticated attackers can bypass authentication controls to read, modify, or delete arbitrary account settings in CentreStack. They can impersonate any user, including administrators, by forging encrypted identifiers. This leads to unauthorized access to sensitive configuration data and potential compromise of hosted tenant domains and administrative accounts.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to CentreStack API endpoints and monitor for suspicious activity related to account settings manipulation.