Dashboard / CVE-2025-14611

CVE-2025-14611

CISA KEV
ACT NOW Priority: 0.00 BB Relevance: 10/100
Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Description

Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.

CISA Known Exploited Vulnerability

Vendor / Product Gladinet — CentreStack and Triofox
Date Added 2025-12-15
Remediation Due 2026-01-05
https://www.centrestack.com/p/gce_latest_release.html ; https://access.triofox.com/releases_history/; https://support.centrestack.com/hc/en-us/articles/360007159054-Hardening-the-CentreStack-Cluster#h_01JQRV57T37HJFQZKBZH9NBXQP ; https://nvd.nist.gov/vuln/detail/CVE-2025-14611

Weakness Classification (1)

Affected Software (2)

VendorProductVersion
gladinet centrestack < 16.12.10420.56791
gladinet triofox < 16.12.10420.56791

References & Advisories (2)

Bug Bounty Relevance

10 / 100
✓ Known exploited (KEV)
✓ High exploitation probability

CVSS Score

Unscored

EPSS — Exploitation Probability

53.30%
Raw Score 0.533020
Percentile 99.0%
Date 2026-10-28

Intelligence Sources

kev ref →

External Links