CVE-2023-26830 File upload in n/a

What is CVE-2023-26830?

CVE-2023-26830 is a high-severity vulnerability in n/a, published on 31 Mar 2023. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to the server.

Weakness: CWE-434

Which versions are affected by CVE-2023-26830?

It affects 1 product.

Products include Gladinet Centrestack.

How do I fix CVE-2023-26830?

No fix has been published for CVE-2023-26830 yet. Limit exposure of the affected software until one is available.

Is CVE-2023-26830 being exploited?

There is no known exploitation of CVE-2023-26830 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-30406 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Exploited Critical 9.0
• CVE-2025-11371 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Exploited High 7.5
• CVE-2025-14611 Gladinet CentreStack and Triofox Hard Coded Cryptographic Exploited High 7.1
• CVE-2023-26829 Auth bypass in n/a Critical 9.8

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as CVE-2022-48137, GHSA-5j89-9926-36q5.