Gladinet
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
At a glance
Actively exploited in the wild — prioritise confirming exposure.
Medium rather than High: exposure is scored at a default because we cannot see your systems or suppliers. If you run or depend on Gladinet CentreStack and Triofox, treat it as High.
Briefing
- Do not treat uncorroborated claims as confirmed breaches.
Questions to ask IT
- Do we run Gladinet CentreStack and Triofox, and is every instance on version 16.12.10420.56791 or later?
- Is any of it reachable from the internet?
- Have we checked whether it has already been used against us?
- If it is not yet patched, what mitigation is in place, and will the fix be done by 11 Nov?
Next steps
- Confirm exposure, mitigation status and any service interruption risk.
Vulnerability facts
Full CVE detail CVE-2025-14611- 7.1 · HighExploitable over the network without any account, under specific conditions, and no one has to click or open anything. High impact on subsequent confidentiality, subsequent integrity and subsequent availability; low on confidentiality.CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:H/SI:H/SA:H/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
- Listed: attacks using it have been seen (on the catalogue since )
- Elevated attack likelihood (~53.3% in 30 days)
- Before 16.12.10420.56791
- 16.12.10420.56791
- Not linked from the CVE record
Versions are as the CVE record states them; check the vendor advisory before planning a fix.
- CVE-2025-14611 has estimated attack likelihood 0.50949 (~50.9% estimated chance of exploitation in 30 days; 98.8th percentile) as of 2026-07-31 — probability signal, not confirmed exploitation
Next steps
- Confirm whether affected products/versions are present and prioritise patching or mitigations
Summary
- Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.
- CVE-2025-14611 is listed in known-exploited catalogue (exploitation in the wild)
- 9% estimated chance of exploitation in 30 days; 98.
- Authoritative catalogues report active exploitation of this vulnerability.
Why this matters in the UK
- Known-exploited catalogue reports exploitation in the wild
Products and services involved
- Gladinet CentreStack and Triofox82% match confidence · CVE-2025-14611
Pulse
Last checked 4d ago · Recheck overdue since 5 Nov 2026, 22:33 UK time · 2 quiet checks collapsed
Suggested changed to 7d.
Listed on the — prioritise confirming exposure and patching.
1 quiet check hidden.
Sources
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
How we know
Statements extracted from sources. Higher confidence means stronger corroboration.
- ConfirmedHeadline90% confidence
Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
- ConfirmedSummary fact75% confidence
Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. Affects Gladinet CentreStack and Triofox. Known ransomware campaign use: Unknown.
- ConfirmedCVE identifier95% confidence
Event involves CVE-2025-14611
- ConfirmedKnown-exploited catalogue98% confidence
CVE-2025-14611 is listed in known-exploited catalogue (exploitation in the wild)
- ConfirmedEstimated attack likelihood95% confidence
CVE-2025-14611 has estimated attack likelihood 0.50949 (~50.9% estimated chance of exploitation in 30 days; 98.8th percentile) as of 2026-07-31 — probability signal, not confirmed exploitation