CVE-2025-11371

CVE Enrichment

CVSS: 7.5 HIGH
EPSS: 92.14%
EPSS Percentile: 99.82%
CISA KEV: YES — Known Exploited Vulnerability

Description

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

Technical Details

CVSS Version: 3.1
CNA / NVD Source: 5dacb0b8-2277-4717-899c-254586fe4912
Published: 10-Oct-2025 00:15
Last Modified: 08-Oct-2026 20:10
EPSS Date: 2026-10-16
CWE: CWE-552

CVSS Vector


            CVSS:3.1                            AV:N /
                            AC:L /
                            PR:N /
                            UI:N /
                            S:U /
                            C:H /
                            I:N /
                            A:N

CISA KEV Details

Date Added: 2025-11-04
Remediation Due: 2025-11-25
Known Ransomware Campaign Use: Unknown
Required Action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Notes: https://www.centrestack.com/p/gce_latest_release.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-11371

Affected Products / Versions

gladinet / centrestack
Version / affected range: * · before (exclusive) 16.10.10408.56683
cpe:2.3:a:gladinet:centrestack:*:*:*:*:*:*:*:*
gladinet / triofox
Version / affected range: * · through (inclusive) 16.7.10368.56560
cpe:2.3:a:gladinet:triofox:*:*:*:*:*:*:*:*

References

Last enrichment sync: 18-Oct-2026 00:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

HomeBlogActive Exploitation of Gladinet CentreStack and Triofox Local File Inclusion Flaw (CVE-2025-11371) Gladinet CentreStack and Triofox Flaw Exploited to Steal Machine Keys

CVE (1)

MITRE ATT&CK (3)

Vendors (1)

Products (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.