CVE entry · CVE-2025-14611
CVE-2025-14611: Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.
- Actively exploited: added to CISA’s KEV catalog on December 15, 2025.
- Use by ransomware: not established so far.
- Remediation deadline for US federal agencies: January 5, 2026.
Description from CISA’s KEV catalog.
What to do
- Check whether your estate includes Gladinet CentreStack and Triofox, including internet-facing devices.
- Apply the vendor’s patch or mitigations (references below). Failing that, isolate the product or stop using it, as CISA requires of US federal agencies.
- An exploited vulnerability has often been used before it was fixed: look for signs of compromise, especially on internet-facing devices.
References
- Vendor advisory or reference cited by CISA (www.centrestack.com)
- Vendor advisory or reference cited by CISA (access.triofox.com)
- Vendor advisory or reference cited by CISA (support.centrestack.com)
- NVD entry (NIST)
- CISA KEV catalog