CVE-2023-26829

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

Mar 31, 2023 (Mar 31, 2023)

Modified

Jun 17, 2026

Description

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.

Vendors: gladinet
Products: centrestack
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.