{
  "site": "https://pwn.watch",
  "generatedAt": "2026-10-23T04:40:54.903Z",
  "tag": {
    "id": "gladinet",
    "label": "Gladinet",
    "isStack": false,
    "url": "https://pwn.watch/t/gladinet",
    "feed": "https://pwn.watch/t/gladinet/feed.xml"
  },
  "counts": {
    "incidents": 4,
    "live": 0,
    "notFullyPatched": 0,
    "patched": 4
  },
  "incidents": [
    {
      "slug": "gladinet-centrestack-and-triofox-cve-2025-14611",
      "title": "Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability",
      "url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611",
      "json": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Gladinet CentreStack and Triofox",
      "tags": [
        "gladinet",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-14611"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-12-15",
      "closedAt": "2025-12-15",
      "updatedAt": "2025-12-15",
      "summary": "Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. Added to CISA KEV on 2025-12-15.",
      "xPost": null
    },
    {
      "slug": "gladinet-triofox-cve-2025-12480",
      "title": "Gladinet Triofox: Triofox Improper Access Control Vulnerability",
      "url": "https://pwn.watch/i/gladinet-triofox-cve-2025-12480",
      "json": "https://pwn.watch/i/gladinet-triofox-cve-2025-12480.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Gladinet Triofox",
      "tags": [
        "gladinet",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-12480"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-11-12",
      "closedAt": "2025-11-12",
      "updatedAt": "2025-11-12",
      "summary": "Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete. Added to CISA KEV on 2025-11-12.",
      "xPost": null
    },
    {
      "slug": "gladinet-centrestack-and-triofox-cve-2025-11371",
      "title": "Gladinet CentreStack and Triofox: CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability",
      "url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-11371",
      "json": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-11371.json",
      "status": "closed",
      "severity": "high",
      "patchStatus": "patched",
      "product": "Gladinet CentreStack and Triofox",
      "tags": [
        "gladinet",
        "cisa-kev"
      ],
      "cveIds": [
        "CVE-2025-11371"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-11-04",
      "closedAt": "2025-11-04",
      "updatedAt": "2025-11-04",
      "summary": "Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files. Added to CISA KEV on 2025-11-04.",
      "xPost": null
    },
    {
      "slug": "gladinet-centrestack-cve-2025-30406",
      "title": "Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability",
      "url": "https://pwn.watch/i/gladinet-centrestack-cve-2025-30406",
      "json": "https://pwn.watch/i/gladinet-centrestack-cve-2025-30406.json",
      "status": "closed",
      "severity": "critical",
      "patchStatus": "patched",
      "product": "Gladinet CentreStack",
      "tags": [
        "gladinet",
        "cisa-kev",
        "rce"
      ],
      "cveIds": [
        "CVE-2025-30406"
      ],
      "affectedVersions": [
        "See vendor advisory / CISA notes (versions not always listed in KEV feed)"
      ],
      "fixedVersions": [
        "See vendor advisory linked in sources"
      ],
      "startedAt": "2025-04-08",
      "closedAt": "2025-04-08",
      "updatedAt": "2025-04-08",
      "summary": "Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution. Added to CISA KEV on 2025-04-08.",
      "xPost": null
    }
  ],
  "posts": [],
  "changes": [
    {
      "incident": "gladinet-centrestack-and-triofox-cve-2025-14611",
      "incidentTitle": "Gladinet CentreStack and Triofox: CentreStack and Triofox Hard Coded Cryptographic Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-12-15",
      "title": "CISA added CVE-2025-14611 to the KEV catalog (due 2026-01-05).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-14611"
    },
    {
      "incident": "gladinet-triofox-cve-2025-12480",
      "incidentTitle": "Gladinet Triofox: Triofox Improper Access Control Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-11-12",
      "title": "CISA added CVE-2025-12480 to the KEV catalog (due 2025-12-03).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/gladinet-triofox-cve-2025-12480"
    },
    {
      "incident": "gladinet-centrestack-and-triofox-cve-2025-11371",
      "incidentTitle": "Gladinet CentreStack and Triofox: CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability",
      "severity": "high",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-11-04",
      "title": "CISA added CVE-2025-11371 to the KEV catalog (due 2025-11-25).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/gladinet-centrestack-and-triofox-cve-2025-11371"
    },
    {
      "incident": "gladinet-centrestack-cve-2025-30406",
      "incidentTitle": "Gladinet CentreStack: CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability",
      "severity": "critical",
      "status": "closed",
      "patchStatus": "patched",
      "date": "2025-04-08",
      "title": "CISA added CVE-2025-30406 to the KEV catalog (due 2025-04-29).",
      "body": null,
      "sourceUrl": null,
      "url": "https://pwn.watch/i/gladinet-centrestack-cve-2025-30406"
    }
  ]
}