Description
Gladinet CentreStack是美国Gladinet公司的一个主要移动访问和安全共享解决方案。提供自托管云存储。 Gladinet CentreStack存在安全漏洞，该漏洞源于硬编码machineKey导致反序列化漏洞，可能导致远程代码执行。攻击者可通过该漏洞在服务器端任意执行代码，写入后门，获取服务器权限，进而控制整个web服务器。
Gladinet CentreStack /portal/loginpage.aspx 代码执行漏洞（CVE-2025-30406）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-30406
https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild
https://gladinetsupport.s3.us-east-1.amazonaws.com/gladinet/securityadvisory-cve-2005.pdf
https://www.centrestack.com/p/gce_latest_release.html
https://blackpointcyber.com/blog/blog-racing-to-exploit-centrestacks-cve-2025-30406/
https://www.bleepingcomputer.com/news/security/centrestack-rce-exploited-as-zero-day-to-breach-file-sharing-servers/
https://www.helpnetsecurity.com/2025/04/09/rce-gladinet-centrestack-file-sharing-exploited-cve-2025-30406/
https://attackerkb.com/topics/7ebXn71J6O/cve-2025-30406
https://github.com/W01fh4cker/CVE-2025-30406
https://www.runzero.com/blog/gladinet-centrestack/