← CVE Radar
CVE-2025-11371Gladinet CentreStack and TrioFox Local File Inclusion Flaw
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560
7.5 HIGHEPSS 92.13%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 7.5 | HIGH | 3.1CISA-ADP | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
CISA required action
⚡ Known exploited · remediation due Nov 25, 2025
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Details
- CVE ID
- CVE-2025-11371
- Status
- Analyzed
- Assigner (CNA)
- Huntress
- Published
- Oct 9, 2025
- Last modified
- 2026-10-08 13:10 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
GladinetCentreStack and TrioFox1 version range
- through 16.7.10368.56560