CVE-2023-26829 Auth bypass in n/a

What is CVE-2023-26829?

CVE-2023-26829 is a critical authentication bypass vulnerability in n/a, published on 31 Mar 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.

Weakness: CWE-863

Which versions are affected by CVE-2023-26829?

It affects 1 product.

Products include Gladinet Centrestack.

How do I fix CVE-2023-26829?

No fix has been published for CVE-2023-26829 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2023-26829 being exploited?

There is no known exploitation of CVE-2023-26829 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Exploited Critical 9.0
• CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Exploited High 7.5
• CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Exploited High 7.1
• CVE-2023-26830 File upload in n/a High 7.2

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2022-48138, GHSA-h55p-3mg5-547m.