CVE-2026-54364
Received Received - Intake

Session Variable Injection in CentreStack

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: VulnCheck

Description
CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attackers to inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter posted to the SelectProvider.aspx endpoint. Attackers can exploit the lack of input sanitization in the custom session serialization format to inject a resellerid session variable, bypassing the IsValidRSession authentication check and gaining unauthorized access to management pages.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD
CVE-2026-54364
EUVD
EUVD-2026-51100

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
centrestack centrestack to 17.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-116 The product prepares a structured message for communication with another component, but encoding or escaping of the data is either missing or done incorrectly. As a result, the intended structure of the message is not preserved.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CentreStack before version 17.4 has a session variable injection flaw in the SelectProvider.aspx endpoint. Unauthenticated attackers can inject arbitrary session variables by embedding newline and tab characters into a crafted AccountName parameter. This happens due to insufficient input sanitization in the custom session serialization format. Attackers can inject a resellerid session variable to bypass the IsValidRSession authentication check and gain unauthorized access to management pages.

Detection Guidance

Check CentreStack versions prior to 17.4 for the SelectProvider.aspx endpoint. Monitor HTTP requests to this endpoint for AccountName parameters containing newline or tab characters. Inspect session variables for unexpected resellerid values.

Impact Analysis

This vulnerability allows unauthenticated attackers to bypass authentication and gain unauthorized access to sensitive management pages. Attackers could manipulate session variables to perform unauthorized actions, potentially leading to data breaches or system compromise. The impact includes unauthorized access to confidential information and administrative functions.

Compliance Impact

This vulnerability could lead to unauthorized access to sensitive data, violating confidentiality requirements under GDPR and HIPAA. Organizations using vulnerable CentreStack versions may face compliance violations, potential fines, and reputational damage due to data exposure or unauthorized access to protected health or personal information.

Mitigation Strategies

Upgrade CentreStack to version 17.4 or later immediately. Apply input validation to sanitize AccountName parameters, blocking newline and tab characters. Review and restrict access to management pages until patched.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54364. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart