Tagged: CentreStack

December 15, 2025

PATCH NOW: Critical Gladinet RCE Flaw Exploits Hardcoded Crypto to Steal Keys

Gladinet is facing fresh trouble once again: vulnerabilities have been uncovered in its CentreStack and Triofox products stemming from embedded, hardcoded cryptography. According to Huntress, the AES implementation relies on fixed keys, allowing attackers...

Vulnerability

October 20, 2025

Zero-Day Alert: Attackers Exploit New Flaw to Bypass CentreStack RCE Patch

Gladinet has released a security update for its enterprise CentreStack solution that remedies a local file inclusion (LFI) vulnerability, CVE-2025-11371 (CVSS 6.2). Attackers have been actively exploiting this flaw as a zero-day since late...