CVE Feed

    Dashboard / CVE / CVE-2025-11371

    CVE-2025-11371

    In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

    Published:Oct 9, 2025
    Last Modified:Feb 26, 2026
    EPS:Oct 9, 2025
    EPSS Score:0.71001
    CVSS Score:7.5

    CISA Notification

    Description

    In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

    Required Action:

    Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

    Notes:

    No extra notes provided.

    Due Date
    Nov 25, 2025
    290 days ago
    Alert Date
    Nov 4, 2025
    311 days ago

    Affected Products

    Vendor
    Gladinet
    Product
    Centrestack
    Vendor
    Gladinet
    Product
    Triofox

    Exploits

    https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flawhttps://github.com/callinston/CVE-2025-11371https://github.com/lap1nou/CVE-2025-11371https://github.com/NetVanguard-cmd/CVE-2025-11371https://github.com/rxerium/CVE-2025-11371

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-150 Collect Data from Common Resource Locations
    CAPEC-639 Probe System Files

    Related CVEs

    CVE-2026-54368 (CVSS 8.7) — CentreStack before 17.4 contains a SQL injection vulnerability in GladDBFiles.SearchEx() and SearchExUnder() t…
    CVE-2026-54367 (CVSS 8.8) — CentreStack before 17.2 contains an authentication bypass vulnerability that allows unauthenticated attackers …
    CVE-2026-54366 (CVSS 8.7) — CentreStack before 17.4 contains an XML external entity (XXE) injection vulnerability that allows unauthentica…
    CVE-2026-54365 (CVSS 8.7) — CentreStack before 17.3 contains an unauthenticated deserialization vulnerability in GSNamespace.dll that allo…
    CVE-2026-54364 (CVSS 6.9) — CentreStack before 17.4 contains a session variable injection vulnerability that allows unauthenticated attack…
    CVE-2026-54363 (CVSS 9.3) — CentreStack before 17.5 contains a hardcoded cryptographic key vulnerability that allows unauthenticated attac…
    CVE-2025-14611 (CVSS 7.1) — Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementa…
    CVE-2025-30406 (CVSS 9) — Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization vulnerability …
    CVE-2024-37782 (CVSS 9.8) — An LDAP injection vulnerability in the login page of Gladinet CentreStack v13.12.9934.54690 allows attackers t…
    CVE-2023-26830 (CVSS 7.2) — An unrestricted file upload vulnerability in the administrative portal branding component of Gladinet CentreSt…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High