THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-54365 (HIGH 7.5) — CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a ma

[NVD] CVE-2026-54365 (HIGH 7.5) — CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a ma

mednvdPublished 2026-07-30

CVE-2026-54365 CVSS: 7.5 HIGH Published: 2026-07-30T13:16:51.503

CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allows unauthenticated attackers to create arbitrary local OS user accounts by supplying a crafted base64-encoded XML string to exposed API endpoints. Attackers can send a malicious StorageConfigure parameter to the jsonimportus

MITRE ATT&CK techniques

CredentialsT1589.001

Indicators of compromise

CVE-2026-54365cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-54365