Gladinet Patches Exploited CentreStack Vulnerability
Source SecurityWeek
Rated by Threat Radar
Data as of 20 Oct 2025, 01:36 UTC
What to do
AI-suggested
European organizations should immediately apply the patches released by Gladinet to remediate the vulnerability in CentreStack. Beyond patching, it is crucial to restrict access to web application endpoints that handle ViewState data, implementing network segmentation and firewall rules to limit exposure. Organizations should audit and rotate machine keys regularly to reduce the risk of key compromise. Implementing strict input validation and employing Web Application Firewalls (WAFs) with rules targeting deserialization attacks can provide additional protection. Monitoring logs for unusual ViewState activity or errors related to deserialization can help detect attempted exploits. Security teams should conduct penetration testing focused on LFI and deserialization vulnerabilities to identify residual risks. Finally, educating developers and administrators about secure handling of serialized data and cryptographic keys will reduce the likelihood of similar vulnerabilities in the future.
Description
The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue. The post Gladinet Patches Exploited CentreStack Vulnerability appeared first on SecurityWeek .