CVE-2023-26829 Information

Description

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account without needing the previous known password resulting in a full authentication bypass.

Reference

https://www.whiteoaksecurity.com/blog/centrestack-disclosure/