CVE-2026-54368
Received Received - Intake

SQL Injection in CentreStack Leading to Remote Code Execution

Publication date: 2026-07-30

Last updated on: 2026-07-30

Assigner: VulnCheck

Description
CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() that allows authenticated attackers to execute arbitrary SQL statements by supplying a crafted x-glad-filter request header through the jsondir API endpoint. Attackers can exploit unsanitized interpolation of the Field parameter directly into SQL query strings to write arbitrary files to the server filesystem via PostgreSQL lo_from_bytea() and lo_export() functions, enabling remote code execution.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-30
Last Modified
2026-07-30
Generated
2026-07-30
AI Q&A
2026-07-30
EPSS Evaluated
N/A
NVD
CVE-2026-54368
EUVD
EUVD-2026-51104

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
centrestack centrestack to 17.4 (exc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-89 The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. Without sufficient removal or quoting of SQL syntax in user-controllable inputs, the generated SQL query can cause those inputs to be interpreted as SQL instead of ordinary user data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-54368 is a SQL injection vulnerability in CentreStack versions before 17.4. It exists in the GladDBFiles.SearchEx() and SearchExUnder() functions. Authenticated attackers can exploit it by sending a crafted x-glad-filter request header to the jsondir API endpoint. This allows execution of arbitrary SQL commands due to unsanitized Field parameters.

Detection Guidance

To detect this vulnerability, monitor network traffic for requests to the jsondir API endpoint containing the x-glad-filter header. Check CentreStack logs for suspicious SQL queries or file write operations. Use PostgreSQL logs to identify lo_from_bytea() or lo_export() function calls originating from CentreStack processes.

Impact Analysis

This vulnerability enables attackers to execute arbitrary SQL commands on the server. They can write arbitrary files to the server filesystem using PostgreSQL functions like lo_from_bytea() and lo_export(). This could lead to remote code execution, allowing attackers to take full control of the affected system.

Compliance Impact

This vulnerability likely violates compliance requirements for GDPR and HIPAA due to unauthorized access and potential data exfiltration. It compromises data integrity and confidentiality, which are core requirements for these regulations. Organizations using vulnerable versions may face legal and regulatory penalties.

Mitigation Strategies

Immediately update CentreStack to version 17.4 or later. If immediate update is not possible, restrict access to the jsondir API endpoint and implement strict input validation for the x-glad-filter header. Disable PostgreSQL functions lo_from_bytea() and lo_export() if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-54368. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart