CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-12-12
Gladinet CentreStack and Triofox Hardcoded Cryptographic Key Arbitrary Local File Inclusion (LFI) Vulnerability (CVE-2025-14611) Security Advisory
[Affected Scope] Gladinet CentreStack and Triofox solutions prior to version 16.12.10420.56791
[Impact] Unauthenticated remote attackers can exploit hardcoded AES keys to read arbitrary local files and potentially achieve full system compromise
[Mitigation] Immediately upgrade to version 16.12.10420.56791 or later and restrict access to publicly exposed endpoints