{
  "version": "https://jsonfeed.org/version/1.1",
  "title": "Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability · updates",
  "home_page_url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611",
  "feed_url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611/feed.json",
  "description": "Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. Added to CISA KEV on 2025-12-15.",
  "language": "en",
  "_pwn": {
    "slug": "gladinet-centrestack-and-triofox-cve-2025-14611",
    "severity": "high",
    "status": "closed",
    "patchStatus": "patched",
    "rss": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611/feed.xml",
    "llms": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611/llms.txt",
    "json": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611.json"
  },
  "items": [
    {
      "id": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611#2025-12-15-a19804e7",
      "url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611#2025-12-15-a19804e7",
      "title": "Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability: CISA added CVE-2025-14611 to the KEV catalog (due 2026-01-05).",
      "content_text": "Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability: CISA added CVE-2025-14611 to the KEV catalog (due 2026-01-05).",
      "date_published": "2025-12-15T00:00:00.000Z",
      "tags": [
        "high"
      ]
    }
  ]
}
