Read the docs
TI-2025-13351 Aliases CVE-2025-14611GHSA-j7r7-3wrm-f59w

Gladinet CentreStack and TrioFox Hard Coded AES Keys

Priority CRITICAL 90Exploited in the wildCWE-798Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
High
Attack requirements
None
Impact type
Security bypass
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-798.

Summary

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. This opens the door for future exploitation and can be leveraged with previous vulnerabilities to gain a full system compromise.

Why it matters now

Exploitation Active In CISA KEV since 2025-12-15CISA due date 2026-01-05
EPSS 0.53302 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed CentreStack and TrioFox (Gladinet): 16.12.10420.56791

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
GladinetCentreStack and TrioFoxbefore 16.12.10420.5679116.12.10420.56791Patch availableCNA
  • CentreStack and TrioFox VendorGladinet Affected before 16.12.10420.56791 Fixed in 16.12.10420.56791 Patch available CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:a:gladinet:centrestack:*:*:*:*:*:*:*:*before 16.12.10420.56791VulnerableGladinet
cpe:2.3:a:gladinet:triofox:*:*:*:*:*:*:*:*before 16.12.10420.56791VulnerableGladinet
  • cpe:2.3:a:gladinet:centrestack:*:*:*:*:*:*:*:* Versions before 16.12.10420.56791 Vulnerable ·Gladinet
  • cpe:2.3:a:gladinet:triofox:*:*:*:*:*:*:*:* Versions before 16.12.10420.56791 Vulnerable ·Gladinet

Remediation

  • Fix · CNA CentreStack and TrioFox (Gladinet) Fixed in 16.12.10420.56791

Timeline

  1. 2025-12-15 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2025-14611
  3. 2026-10-03 Alias added: GHSA-j7r7-3wrm-f59w

References

Exploit 1

  • TI-2025-21708 Hard-coded credentials in Gladinet CentreStack KEVCVSS 3.1CRITICAL 9.8
  • TI-2025-10418 Gladinet CentreStack and TrioFox Local File Inclusion Flaw KEVCVSS 3.1HIGH 7.5
  • TI-2023-11791 An authentication bypass vulnerability in the Password Reset component of Gladinet… CVSS 3.1CRITICAL 9.8
  • TI-2023-11792 An unrestricted file upload vulnerability in the administrative portal branding component… CVSS 3.1HIGH 7.2

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences