VULNERABILITY INTELLIGENCE

CVE-2025-11371

CVSS score7.5 HIGH

EPSS probability92.14%

CISA KEVKnown exploited vulnerability

Published2025-10-09

Last modified2026-10-08

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Known Exploited Vulnerability

Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Vendor / product: Gladinet / CentreStack and Triofox

Description

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

Weakness classification

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-552

Primary references

5dacb0b8-2277-4717-899c-254586fe4912 — Exploit, Third Party Advisory
134c704f-9b21-4f2e-91b3-4a467353bcc0 — Release Notes
134c704f-9b21-4f2e-91b3-4a467353bcc0 — US Government Resource