MSRXGladinet vulnerabilities being exploited
3 Gladinet flaws were confirmed exploited in the wild in the past 365 days, across 2 products: CentreStack and Triofox, Triofox. If you run any of them, patch these first.
| Added | Exploited vulnerability | Fix by |
|---|---|---|
| 2025-12-15 | CVE-2025-14611 CentreStack and Triofox Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. | 2026-01-05 |
| 2025-11-12 | CVE-2025-12480 Triofox Gladinet Triofox Improper Access Control Vulnerability Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. | 2025-12-03 |
| 2025-11-04 | CVE-2025-11371 CentreStack and Triofox Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files. | 2025-11-25 |
Source: CISA Known Exploited Vulnerabilities catalog 2026.10.29 (live). A listing means some versions are affected: check yours in the advisory. Guidance only.