Dashboard / CVE-2025-11371

CVE-2025-11371

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.

CISA Known Exploited Vulnerability

Vendor / Product Gladinet — CentreStack and Triofox
Date Added 2025-11-04
Remediation Due 2025-11-25
https://www.centrestack.com/p/gce_latest_release.html ; https://nvd.nist.gov/vuln/detail/CVE-2025-11371

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
gladinet centrestack < 16.10.10408.56683
gladinet triofox < 16.7.10368.56560

References & Advisories (3)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

92.14%
Raw Score 0.921370
Percentile 99.8%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links