Read the docs

Gladinet

Records18All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Gladinet records in CISA KEV
TI-2025-13351 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Priority CRITICAL 90KEV 2025-12-15TI-2025-11451 Gladinet Triofox Improper Access Control Vulnerability Priority CRITICAL 98KEV 2025-11-12TI-2025-10418 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Priority CRITICAL 90KEV 2025-11-04TI-2025-21708 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Priority CRITICAL 100KEV 2025-04-08

Components

Products in the NVD configurations · select one to filter the records
Centrestack 5 records CRITICAL Triofox 3 records CRITICAL

Records

5 records in Centrestack · all components

TI-2025-21708 CVE-2025-30406 · GHSA-hgp9-3v5v-223j

Hard-coded credentials in Gladinet CentreStack

Priority CRITICAL 100KEV

Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's hardcoded machineKey use, as exploited in the wild in March 2025.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.94343 Published 2025-04-03 Fixed in 16.4.10315.56368 CWE-321
TI-2025-13351 CVE-2025-14611 · GHSA-j7r7-3wrm-f59w

Gladinet CentreStack and TrioFox Hard Coded AES Keys

Priority CRITICAL 90KEV

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme.

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.53302 Published 2025-12-12 Fixed in 16.12.10420.56791 CWE-798
TI-2025-10418 CVE-2025-11371 · GHSA-hj6h-fpv2-5h4v

Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Priority CRITICAL 90KEV

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92137 Published 2025-10-09 No fix listed CWE-552
TI-2023-11791 CVE-2023-26829 · GHSA-h55p-3mg5-547m

An authentication bypass vulnerability in the Password Reset component of Gladinet…

Priority MEDIUM 51

An authentication bypass vulnerability in the Password Reset component of Gladinet CentreStack before 13.5.9808 allows remote attackers to set a new password for any valid user account, without needing the previous known…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01199 Published 2023-03-31 No fix listed CWE-863
TI-2023-11792 CVE-2023-26830 · GHSA-5j89-9926-36q5

An unrestricted file upload vulnerability in the administrative portal branding component…

Priority LOW 36

An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreStack before 13.5.9808 allows authenticated attackers to execute arbitrary code by uploading malicious files to…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01063 Published 2023-03-31 No fix listed CWE-434
Open these records in search →