Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution. NOTE: a CentreStack admin can manually delete the machineKey defined in portal\web.config.

According to its banner, the version of Gladinet CentreStack running on the remote host is prior to 16.4.10315.56368. It is, therefore, affected by an Insecure Deserialization due to the CentreStack portal's use an hardcoded machineKey.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025. This enables threat actors (who know the machineKey) to serialize a payload for server-side deserialization to achieve remote code execution.
NOTE: a CentreStack admin can manually delete the machineKey defined in portal\web.config.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
115077	Gladinet CentreStack < 16.4.10315.56368 Insecure Deserialization	Web App Scanning	Component Vulnerability	critical
241071	Gladinet CentreStack < 16.4.10315.56368 Hard-coded Cryptographic Key	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2025-30406

critical

Tenable Plugins

critical

critical