Known exploited vulnerabilities
Gladinet vulnerabilities attackers have used
Every Gladinet vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 4 Gladinet vulnerabilities as exploited in the wild, 2 of them added in the last 12 months. The most recent is CVE-2025-14611, added Dec 15, 2025. CentreStack and Triofox has the most entries (2).
- In KEV, all time
- 4
- Added, last 12 months
- 2
- Used in ransomware
- 0
- New CVEs this week
- 0
By product
CentreStack and Triofox (2), CentreStack (1), Triofox (1).
Every Gladinet entry in CISA KEV
CVE-2025-14611
Added · dueGladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability
Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer…
CVE-2025-12480
Added · dueGladinet Triofox Improper Access Control Vulnerability
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.
CVE-2025-11371
Added · dueGladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability
Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.
CVE-2025-30406
Added · dueGladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability
Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge…
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.