CVE-2023-26829

Name of the Vulnerable Software and Affected Versions Gladinet CentreStack versions prior to 13.5.9808

Description An authentication bypass issue in the Password Reset component allows remote attackers to set a new password for any valid user account without needing the previous known password, resulting in a full authentication bypass.

Recommendations For versions prior to 13.5.9808, update to version 13.5.9808 or later to resolve the issue. As a temporary workaround, consider disabling the Password Reset component until a patch is available. Restrict access to the Password Reset functionality to minimize the risk of exploitation.