[ Vendor · 4 CVEs ]
Gladinet
CVEs affecting Gladinet published in the last 30 days, plus any Gladinet CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2025-14611 | 12 Dec 2025 | CVSS 9.8 | Gladinet CentreStack and Triofox Hard Coded CryptographicGladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This… | Exploited |
| CVE-2025-12480 | 10 Nov 2025 | CVSS 9.1 | Gladinet Triofox Improper Access ControlTriofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after… | Exploited |
| CVE-2025-11371 | 9 Oct 2025 | CVSS 7.5 | Gladinet CentreStack and Triofox Files or Directories Accessible to External PartiesIn the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows… | Exploited |
| CVE-2025-30406 | 3 Apr 2025 | CVSS 9.8 | Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic KeyGladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability due to the CentreStack portal's… | ExploitedFix |