CVE-2026-54363
Deferred Deferred - Pending Action

Hardcoded Cryptographic Key in CentreStack

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: VulnCheck

Description
CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attackers to forge arbitrary encrypted tokens by exploiting a static SysNumber value used as entropy for AccessTicket.Encrypt() and AccessTicket.Decrypt() across all installations. Attackers can use the hardcoded key to craft valid x-glad-auth headers and call privileged API endpoints such as acquiretenantbackuptoken to obtain a domain administrator IdentityTicket, enabling a complete unauthenticated remote code execution chain.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-08-19
AI Q&A
2026-07-30
EPSS Evaluated
2026-08-18
NVD
CVE-2026-54363
EUVD
EUVD-2026-51099

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
centrestack centrestack to 17.5 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-321 The product uses a hard-coded, unchangeable cryptographic key.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CentreStack before version 17.5 has a hardcoded cryptographic key that allows unauthenticated attackers to forge encrypted tokens. This static key is used as entropy for encryption and decryption functions, enabling attackers to create valid authentication headers and call privileged API endpoints. The flaw leads to a complete unauthenticated remote code execution chain.

Detection Guidance

Detecting this vulnerability requires checking for CentreStack versions prior to 17.5. Inspect installed software versions on servers hosting CentreStack. Look for the presence of x-glad-auth headers in API requests or responses, which may indicate exploitation attempts. Monitor logs for unauthorized calls to privileged endpoints like acquiretenantbackuptoken.

Impact Analysis

An attacker could exploit this to gain full control over a CentreStack server without authentication. This includes executing arbitrary code, accessing sensitive data, and potentially taking over the entire system, leading to severe security breaches and data loss.

Compliance Impact

This vulnerability likely violates compliance requirements for data protection and security, such as GDPR and HIPAA, due to unauthorized access risks and potential data breaches. Organizations using affected versions may face legal penalties and reputational damage.

Mitigation Strategies

Immediately upgrade CentreStack to version 17.5 or later to address the hardcoded key issue. If upgrading is not immediately possible, restrict network access to CentreStack servers and API endpoints to trusted sources only. Review and revoke any potentially compromised tokens or sessions.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54363. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart