Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vulnerability record

CVE-2025-11371

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

HighExploitation confirmedCISA KEV
What should I do?

This vulnerability is in the CISA Known Exploited Vulnerabilities catalog: attackers are using it. If you run CentreStack and Triofox, fix it now.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

US federal civilian agencies must remediate by Nov 25, 2025.

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations and CISA's required action, limit exposure of affected systems, and watch this record for a patch.

Description

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Affected products

ProductVendorAffected versionsFixed inSource
CentreStackGladinet< 16.10.10408.5668316.10.10408.56683NVD
CentreStack and TriofoxGladinet——KEV
TriofoxGladinet<= 16.7.10368.56560—NVD

Sources: NVD = NIST National Vulnerability Database; KEV = CISA Known Exploited Vulnerabilities catalog.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdateKEV

    CVE-2025-11371 scored CVSS 7.5: Gladinet CentreStack and Triofox, Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

    CISA lists this as exploited in the wild. Unpatched CentreStack and Triofox systems are exposed to active attacks now.

    Basis: NIST National Vulnerability Database

1 earlier event is available with a subscription. See plans.

Coverage

We have not published a story about this vulnerability yet.

References

  • centrestack.com https://www.centrestack.com/p/gce_latest_release.html
  • nvd.nist.gov https://nvd.nist.gov/vuln/detail/CVE-2025-11371
  • huntress.com https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw
  • cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-11371