Secuno
ENNL
Book demo

CVE-2025-14611

Gladinet CentreStack and Triofox Hard Coded Cryptographic

9.8 CRITICALActively exploited (CISA KEV)Public exploitEPSS 53.3%
  1. Published12 Dec 2025
  2. Added to CISA KEV15 Dec 2025
  3. Remediation due5 Jan 2026
Actively exploited (CISA KEV)

Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.

Added to KEV: 15 Dec 2025Federal remediation due: 5 Jan 2026

Description

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication. This opens the door for future exploitation and can be leveraged with previous vulnerabilities to gain a full system compromise.

CVSS 3.1 breakdown

Attack vectorNetwork
Attack complexityLow
Privileges requiredNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

Gladinet Centrestack< 16.12.10420.56791
Gladinet Triofox< 16.12.10420.56791

Remediation

Fixed in
Gladinet Centrestack≥ 16.12.10420.56791
Gladinet Triofox≥ 16.12.10420.56791

References

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

CVE-2026-1095669.8
Rapyd Admin from 9.0.0 before 9.20.0 contains a hard-coded credentials vulnerability…
CVE-2026-1087539.4
Agnaistic agnai through 1.0.555 contains a hard-coded credentials vulnerability in…
CVE-2026-1052789.8
The published Docker image for openPDC includes a fixed administrative credential with…
CVE-2026-842508.4
IBM Guardium Data Protection 12.2 is vulnerable due to weak cryptographic protection…
CVE-2026-622529.8
Homer is open source telecom observability software. Prior to version 11.0.283, on…
CVE-2026-1021618.8
An unauthenticated attacker located on an adjacent private network (or any attacker…

Frequently asked

Is CVE-2025-14611 being actively exploited?

Yes. CVE-2025-14611 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 15 Dec 2025.

How severe is CVE-2025-14611?

CVE-2025-14611 has a CVSS 3.1 base score of 9.8, rated critical. EPSS estimates a 53.3% probability of exploitation.

Which products are affected by CVE-2025-14611?

Affected products include Gladinet Centrestack, Gladinet Triofox.

How do I fix CVE-2025-14611?

Upgrade affected software to a fixed version, for example Gladinet Centrestack 16.12.10420.56791, Gladinet Triofox 16.12.10420.56791 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2025-14611 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation worksBook a demo

Get Patch this first every Monday

Five vulnerabilities that matter this week, ranked on real exploitation. Plain language, one email, no spam.

You can unsubscribe with one click from every issue. We handle your details as described in our privacy policy.

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.