CVE-2023-26829

Description

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known password, resulting in a full authentication bypass.

Related CPE's

References

https://www.whiteoaksecurity.com/blog/centrestack-disclosure/

CvssV3 impact

CvssV2 impact