Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability ยท updates https://pwn.watch/i/gladinet-centrestack-cve-2025-30406 Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution. Added to CISA KEV on 2025-04-08. en Tue, 08 Apr 2025 00:00:00 GMT Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability: CISA added CVE-2025-30406 to the KEV catalog (due 2025-04-29). https://pwn.watch/i/gladinet-centrestack-cve-2025-30406 https://pwn.watch/i/gladinet-centrestack-cve-2025-30406#2025-04-08-eff544dc Tue, 08 Apr 2025 00:00:00 GMT critical <p>Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability: CISA added CVE-2025-30406 to the KEV catalog (due 2025-04-29).</p>