CVE-2025-30406 is a critical deserialization vulnerability in Gladinet CentreStack, potentially allowing remote code execution. Exploitation has been observed in the wild, emphasizing the immediate need for mitigation. Gladinet CentreStack versions through 16.1.10296.56315 are affected due to the hardcoded machineKey use in the CentreStack portal. Successful exploitation allows threat actors with knowledge of the machineKey to serialize a payload for server-side deserialization, leading to remote code execution. With an SVRS of 83, this vulnerability is considered critical, warranting immediate action. This high score, driven by active exploits and real-world exploitation data, indicates the urgent need for patching or mitigation to prevent potential system compromise. The vulnerability has been added to the CISA KEV catalog, meaning federal agencies must patch by a certain date.