Vulnerabilities / CVE-2023-26829

CVE-2023-26829

Published 2023-03-31 · published (not yet in NVD)

CVE-2023-26829

9.8 CRITICAL
CVSS 3.1 · CNA

1.2%
chance of exploitation in the next 30 days (EPSS; higher than 68% of CVEs)

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.

Scores

9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCNA

Affected products

n/a n/a: n/a

1 references (advisories, patches, write-ups)

https://www.whiteoaksecurity.com/blog/centrestack-disclosure/

Sources: CVE.org, FIRST EPSS. Missing ones did not answer or have no record yet.

Look up another CVE Check your dependencies Scan a website