Actively exploited vulnerabilities affecting Gladinet products.https://wildfortech.comhttps://wildfortech.com/security#CVE-2025-14611https://wildfortech.com/security#CVE-2025-14611Gladinet CentreStack and Triofox ship with hardcoded AES cryptographic keys, meaning any attacker who knows those keys — and they are not secret once discovered — can craft malicious requests against publicly exposed endpoints without needing any credentials. The practical result is unauthenticated local file inclusion, which allows attackers to read arbitrary files on the server. Any organization running these products on an internet-facing system is directly at risk.Mon, 15 Dec 2025 00:00:00 GMTGladinetCentreStack and Triofoxhttps://wildfortech.com/security#CVE-2025-12480https://wildfortech.com/security#CVE-2025-12480Gladinet Triofox, a file-sharing and collaboration platform, fails to properly restrict access to its initial setup pages after initial configuration is complete. This means an attacker could reach setup interfaces that should be locked down on a live system, potentially allowing unauthorized reconfiguration or takeover. Because setup pages typically carry elevated privileges and trust, exposure of these pages on a production system represents a serious risk of unauthorized access or system compromise.Wed, 12 Nov 2025 00:00:00 GMTGladinetTriofoxhttps://wildfortech.com/security#CVE-2025-11371https://wildfortech.com/security#CVE-2025-11371Gladinet CentreStack and Triofox, which are file-sharing and remote access platforms used in enterprise environments, contain a vulnerability that exposes system files to unauthorized external parties. This means attackers could access sensitive files or directories on the server without proper authorization, potentially exposing credentials, configuration data, or other critical information that could enable further compromise of the environment.Tue, 04 Nov 2025 00:00:00 GMTGladinetCentreStack and Triofox