Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Gladinet Component: Triofox Clear all filters
TI-2025-13351 CVE-2025-14611 · GHSA-j7r7-3wrm-f59w

Gladinet CentreStack and TrioFox Hard Coded AES Keys

Priority CRITICAL 90KEV

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme.

CVSS 4.0HIGH 7.1 Network No auth No interaction EPSS 0.53302 Published 2025-12-12 Fixed in 16.12.10420.56791 CWE-798
TI-2025-11451 CVE-2025-12480 · GHSA-26hx-622f-3855

Improper access control in TrioFox

Priority CRITICAL 98KEV

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.95748 Published 2025-11-10 Fixed in 16.7.10368.56560 CWE-284
TI-2025-10418 CVE-2025-11371 · GHSA-hj6h-fpv2-5h4v

Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Priority CRITICAL 90KEV

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.92137 Published 2025-10-09 No fix listed CWE-552