CVE-2025-11371highunder attackCWE-552

CVE-2025-11371: high-severity vulnerability in Gladinet CentreStack and TrioFox

Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Published · Updated

Follow this CVE+ Monitor CentreStack+ Monitor Triofox

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 7.5epss 92%
from disclosure to weapon2 days
Published on NVDOct 9
1st PoC+2d
metasploitApr 3
CISA KEV+26d
Action required by CISAfederal deadline: 2025-11-25

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

In short

An unauthenticated attacker can read sensitive system files from Gladinet CentreStack and TrioFox servers without logging in. This flaw exposes confidential information and is actively being exploited in real-world attacks.

Technical detail

A Local File Inclusion (LFI) vulnerability in default installations allows unauthenticated remote attackers to read arbitrary system files through improper path handling. The vulnerability affects all versions up to 16.7.10368.56560 and requires no prior authentication or user interaction.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
Gladinet · CentreStack and TrioFox
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Gladinet CentreStack and TrioFox

In the same product, most dangerous first.

CVE-2025-14611HIGHGladinet CentreStack and TrioFox Hard Coded AES KeysEPSS 53.3%KEV