Gladinet
Security incidents tagged Gladinet. Newest first.
3 Gladinet incidents in the last 12 months
- Incidents
- 4
- Live
- 0
- Patched
- 4
- Days without an incident
- 312
- Longest quiet run: 312 days (Dec 16–Oct 23)
Show 4 older incidents4 older incidents
December 2025 1
PatchedGladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability
Gladinet CentreStack and Triofox
Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. Added to CISA KEV on 2025-12-15.
Open incident →CVE-2025-14611
November 2025 2
PatchedGladinet Triofox: Triofox Improper Access Control Vulnerability
Gladinet Triofox
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. Added to CISA KEV on 2025-11-12.
Open incident →CVE-2025-12480PatchedGladinet CentreStack and Triofox: CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
Gladinet CentreStack and Triofox
Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files. Added to CISA KEV on 2025-11-04.
Open incident →CVE-2025-11371
April 2025 1
PatchedGladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Gladinet CentreStack
Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution. Added to CISA KEV on 2025-04-08.
Open incident →CVE-2025-30406
