Gladinet

Vulnerability activity for Gladinet: what is being exploited, what was published lately, and when the next patch release is due.

All vendors Open in the dashboard

Last 30 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 90 days

CVEs: 0
Critical (CVSS 9+): 0
Exploited (CISA KEV): 0
With exploit code: 0

Last 365 days

CVEs: 3
Critical (CVSS 9+): 1
Exploited (CISA KEV): 3
With exploit code: 3

Exploited now

CVEs on CISA's known-exploited list, newest first. "Days to KEV" counts from the CVE's publication.

7.1HighDec 15, 2025Gladinet CentreStack and Triofox Auth bypass / access controlCVE-2025-14611Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.Added to KEV Dec 15, 2025Exploited53% likelyExploit codeMetasploit · NucleiDetection
9.1CriticalNov 12, 2025Gladinet Triofox Auth bypass / access controlCVE-2025-12480Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.Added to KEV Nov 12, 2025Exploited96% likelyExploit codeNucleiDetection
7.5HighNov 4, 2025Gladinet CentreStack and Triofox Path traversal / file handlingCVE-2025-11371Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.Added to KEV Nov 4, 2025Exploited92% likelyExploit codeMetasploit · NucleiDetection
9.0CriticalApr 3, 2025Gladinet CentreStack Crypto / certificateCVE-2025-30406Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution.Added to KEV Apr 8, 2025 · 5 days after publicationExploited94% likelyExploit codeMetasploit · NucleiDetection

Recent

7.1HighDec 15, 2025Gladinet CentreStack and Triofox Auth bypass / access controlCVE-2025-14611Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.Exploited53% likelyExploit codeMetasploit · NucleiDetection
9.1CriticalNov 12, 2025Gladinet Triofox Auth bypass / access controlCVE-2025-12480Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.Exploited96% likelyExploit codeNucleiDetection
7.5HighNov 4, 2025Gladinet CentreStack and Triofox Path traversal / file handlingCVE-2025-11371Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.Exploited92% likelyExploit codeMetasploit · NucleiDetection
9.0CriticalApr 3, 2025Gladinet CentreStack Crypto / certificateCVE-2025-30406Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution.Exploited94% likelyExploit codeMetasploit · NucleiDetection

See every Gladinet entry on the dashboard.