CVE-2025-11371 - CVE House
Back to Database
Status published Unknown CVE-2025-11371

Gladinet CentreStack and TrioFox Local File Inclusion Flaw

Vulnerability Description

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild.  This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-11371

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Bryan Masters
  • James Maclachlan
  • Jai Minton

References

More from Gladinet

View All →
CVE-2025-30406
Gladinet CentreStack through 16.1.10296.56315 (fixed in 16.4.10315.56368) has a deserialization...
Critical 9
CVE-2025-14611
Gladinet CentreStack and TrioFox Hard Coded AES Keys
High 7.1

Affected Vendor

Affected Software

CentreStack and TrioFox
Vulnerable Versions:
0

Timeline

Official Publish: October 9th, 2025
Last Modified: February 26th, 2026
Added to House: July 22nd, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.