Vendor
Gladinet: actively exploited vulnerabilities
4 vulnerabilities in Gladinet products are listed in CISA’s catalog of actively exploited vulnerabilities. Latest addition on December 15, 2025: CVE-2025-14611 (CentreStack and Triofox).
- 4 exploited vulnerabilities in the catalog
- 3 added in the last 12 months
- 0 used by ransomware
- 3 products affected
Affected products
- CentreStack and Triofox2
- CentreStack1
- Triofox1
All exploited vulnerabilities
CISA KEV catalog, newest first: each entry corresponds to observed exploitation.
2025 4 vulnerabilities
-
CVE-2025-14611Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
-
CVE-2025-12480Gladinet Triofox Improper Access Control Vulnerability
-
CVE-2025-11371Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
-
CVE-2025-30406Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
What to do
If your estate includes any of these products, make sure the vendor’s patches are applied, starting with the most recent vulnerabilities and those used by ransomware, then look for signs of compromise: an exploited vulnerability has often been used before it was fixed.
Additions from all vendors are tracked on the Actively exploited vulnerabilities page, updated several times a day. Sources: CISA KEV catalog (US public domain) and CERT-FR.