Read the docs

Gladinet

Records18All Threatist records
Exploited (KEV)4In CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high10CVSS 7.0–8.9

Exploited now

Gladinet records in CISA KEV
TI-2025-13351 Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Priority CRITICAL 90KEV 2025-12-15TI-2025-11451 Gladinet Triofox Improper Access Control Vulnerability Priority CRITICAL 98KEV 2025-11-12TI-2025-10418 Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Priority CRITICAL 90KEV 2025-11-04TI-2025-21708 Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Priority CRITICAL 100KEV 2025-04-08

Components

Products in the NVD configurations · select one to filter the records
Centrestack 5 records CRITICAL Triofox 3 records CRITICAL

Records

3 records in Triofox · all components

TI-2025-11451 CVE-2025-12480 · GHSA-26hx-622f-3855

Improper access control in TrioFox

Priority CRITICAL 98KEV

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.95748 Published 2025-11-10 Fixed in 16.7.10368.56560 CWE-284
TI-2025-13351 CVE-2025-14611 · GHSA-j7r7-3wrm-f59w

Gladinet CentreStack and TrioFox Hard Coded AES Keys

Priority CRITICAL 90KEV

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme.

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.53302 Published 2025-12-12 Fixed in 16.12.10420.56791 CWE-798
TI-2025-10418 CVE-2025-11371 · GHSA-hj6h-fpv2-5h4v

Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Priority CRITICAL 90KEV

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92137 Published 2025-10-09 No fix listed CWE-552
Open these records in search →