Known Exploited Vulnerabilities December 15, 2025 · CISA KEV Catalog

CVE-2025-14611: Gladinet Centre Stack and Triofox Hard Coded Cryptographic Vulnerability

Gladinet CentreStack and TrioFox contain a hardcoded cryptographic keys vulnerability for their implementation of the AES cryptoscheme. This vulnerability degrades security for public exposed endpoints that may make use of it and may offer arbitrary local file inclusion when provided a specially crafted request without authentication.

Read the original at CISA KEV Catalog ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-14611 Gladinet
Related: CVE-2025-12480: Gladinet Triofox Improper Access Control Vulnerability Known Exploited Vulnerabilities · Nov 12, 2025
CVE-2025-11371: Gladinet Centre Stack and Triofox Files or Directories Accessible to External Parties Vulnerability Known Exploited Vulnerabilities · Nov 04, 2025
CVE-2025-30406: Gladinet Centre Stack and Triofox Use of Hard-coded Cryptographic Key Vulnerability Known Exploited Vulnerabilities · Apr 08, 2025