Skip to main content
VulnerabilityPublished

Gladinet Patches Exploited CentreStack Vulnerability

Source SecurityWeek

0
Severity
Medium

Rated by Threat Radar

Data as of 20 Oct 2025, 01:36 UTC

What to do

AI-suggested

European organizations should immediately apply the patches released by Gladinet to remediate the vulnerability in CentreStack. Beyond patching, it is crucial to restrict access to web application endpoints that handle ViewState data, implementing network segmentation and firewall rules to limit exposure. Organizations should audit and rotate machine keys regularly to reduce the risk of key compromise. Implementing strict input validation and employing Web Application Firewalls (WAFs) with rules targeting deserialization attacks can provide additional protection. Monitoring logs for unusual ViewState activity or errors related to deserialization can help detect attempted exploits. Security teams should conduct penetration testing focused on LFI and deserialization vulnerabilities to identify residual risks. Finally, educating developers and administrators about secure handling of serialized data and cryptographic keys will reduce the likelihood of similar vulnerabilities in the future.

Description

The unauthenticated local file inclusion bug allows attackers to retrieve the machine key and execute code remotely via a ViewState deserialization issue. The post Gladinet Patches Exploited CentreStack Vulnerability appeared first on SecurityWeek .

References

Community reviews

Loading reviews…