Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

Public source report. This item is not matched to your stack and does not establish whether you are affected.

• NewsExploited · CISA KEVGladinet · CentreStack and Triofox

  Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability

  CVE-2025-11371

  Gladinet CentreStack and Triofox contains a files or directories accessible to external parties vulnerability that allows unintended disclosure of system files.

  CISA's required action · due 25 Nov 2025 for U.S. federal civilian agencies

  Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

  Cited by CISA: centrestack.com · nvd.nist.gov

  Added to KEV 4 Nov 2025 · Source checked 3 Nov 2026, 23:45 UTC · CISA KEV entry

  Loading voting…