gladinet News Articles

CISA Warns of Gladinet CentreStack and Triofox Files Vulnerability Exploited in Attacks

CISA warns vulnerability affects system files and directories to unauthorized external access of Gladinet CentreStack and Triofox platforms.

3 weeks ago

CISA Warns of Gladinet CentreStack and Triofox Files Vulnerability Exploited in Attacks

CISA warns vulnerability affects system files and directories to unauthorized external access of Gladinet CentreStack and Triofox platforms.

3 weeks ago

CISA Issues Alert on Gladinet CentreStack and Triofox Vulnerabilities Under Active Exploitation

CISA has added a critical vulnerability affecting Gladinet CentreStack and Triofox to its Known Exploited Vulnerabilities catalog, signaling active exploitation in the wild.

3 weeks ago

U.S. CISA adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog

U.S. CISA adds Gladinet CentreStack, and CWP Control Web Panel flaws to its Known Exploited Vulnerabilities catalog.

3 weeks ago

CISA Warns! New Bugs in Gladinet, Control Web Panel, and WordPress Expose Systems

Critical security vulnerabilities discovered in Gladinet, Control Web Panel, and WordPress. Urgent updates recommended to protect systems.

3 weeks ago

CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

CISA warns of new exploited flaws in Gladinet, CWP, and WordPress plugins, urging urgent patching.

3 weeks ago

CISA adds 2 vulnerabilities to its KEV catalogue

The US cyber agency says hackers are exploiting vulnerabilities in Gladinet CentreStack and Triofox products and CentOS Web Panel.

3 weeks ago

Gladinet fixes actively exploited zero-day in file-sharing software

Gladinet has released security updates for its CentreStack business solution to address a local file inclusion vulnerability (CVE-2025-11371) that threat actors have leveraged as a zero-day since late September.

CVE-2025-11371: Unpatched zero-day in Gladinet CentreStack, Triofox under attack

Threat actors are exploiting a zero-day, tracked as CVE-2025-11371 in Gladinet CentreStack and Triofox products.

Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371) - Help Net Security

CVE-2025-11371, a vulnerability in Gladinet CentreStack and Triofox that's currently without a patch, is actively exploited by attackers.

Hackers exploiting zero-day in Gladinet file sharing software

Threat actors are exploiting a zero-day vulnerability (CVE-2025-11371) in Gladinet CentreStack and Triofox products, which allows a local attacker to access system files without authentication.

Zero-day in popular file-sharing software actively exploited

Security research firm Huntress is warning all users of Gladinet's CentreStack and Triofox file-sharing tools to urgently apply an available mitigation, as a zero-day is being actively exploited and there's...

Gladinet CentreStack & Triofox 0-Day RCE Vulnerability Under Active Exploitation

Huntress’ Security Operations Center (SOC) detected successful exploitation of Gladinet CentreStack software despite the instance.

From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability

Huntress reports active exploitation of Gladinet CVE-2025-11371, exposing system files and enabling remote code execution.

Gladinet CentreStack and Triofox 0-Day Flaw Under Active Attack

Gladinet CentreStack and Triofox have come under active attack as threat actors exploit an unauthenticated local file inclusion flaw (CVE-2025-11371).

Gladinet CentreStack And Triofox 0-Day RCE Vulnerability Actively Exploited In Attacks

An active in-the-wild exploitation of a zero-day vulnerability in Gladinet CentreStack and Triofox products. Tracked as CVE-2025-11371, the unauthenticated Local File Inclusion (LFI) flaw allows attackers to achieve remote code execution (RCE) on affected systems.

Gladinet CentreStack And Triofox 0-Day RCE Vulnerability Actively Exploited In Attacks

An active in-the-wild exploitation of a zero-day vulnerability in Gladinet CentreStack and Triofox products. Tracked as CVE-2025-11371, the unauthenticated Local File Inclusion (LFI) flaw allows attackers to achieve remote code execution (RCE) on affected systems.

kmkz @kmkz_security - Twitter Profile | Xstalk

See tweets, replies, photos and videos from @kmkz_security Twitter profile. 19K Followers, 2K Following, 26K Tweets. Offensive Security, pom-pom girl... Who cares ?? Whoami ? 👉 https://youtube.com/playlist?list=PLs_byGBGz8O4MqPkK2jDv20kZjsmeqRn1&si=IaZm

Gladinet flaw CVE-2025-30406 actively exploited in the wild

Huntress reports active exploitation of Gladinet CVE-2025-30406 in the wild, affecting seven organizations and 120 endpoints.

Attackers exploit zero-day flaw in Gladinet CentreStack file-sharing platform

Critical vulnerability affects both CentreStack and Gladinet’s on-premises file-sharing server, Triofox.

Huntress Documents In-The-Wild Exploitation of Critical Gladinet Vulnerabilities

The flaw, tagged as CVE-2025-30406, was added to CISA’s Known Exploited Vulnerabilities (KEV) catalog in early April.

Zero-Day in CentreStack File Sharing Platform Under Attack

Gladinet's platform is widely used among managed service providers, and a critical deserialization flaw could put MSP customers in jeopardy.

CentreStack RCE exploited as zero-day to breach file sharing servers

Hackers exploited a vulnerability in Gladinet CentreStack's secure file-sharing software as a zero-day since March to breach storage servers

CISA Alerts on Active Exploitation of CentreStack Hard-Coded Key Vulnerability

CISA has issued an alert highlighting a critical vulnerability in Gladinet CentreStack, a cloud-based enterprise file-sharing platform.

RCE flaw in MSP-friendly file sharing platform exploited by attackers (CVE-2025-30406) - Help Net Security

A RCE vulnerability (CVE-2025-30406) in Gladinet CentreStack file-sharing/remote file access platform has been added to CISA's KEV catalog.

CISA Adds New Flaws CVE-2025-30406 And CVE-2025-29824

CISA adds CVE-2025-30406 & CVE-2025-29824 to its KEV Catalog. These vulnerabilities affect Gladinet CentreStack & Microsoft Windows.

CISA Adds New Flaws CVE-2025-30406 And CVE-2025-29824

CISA adds CVE-2025-30406 & CVE-2025-29824 to its KEV Catalog. These vulnerabilities affect Gladinet CentreStack & Microsoft Windows.

CISA Warns of CentreStack's Hard-Coded MachineKey Vulnerability Enabling RCE Attacks

Critical Gladinet CentreStack flaw CVE-2025-30406 actively exploited in March 2025 enables remote code execution.

CISA Adds Two Known Exploited Vulnerabilities to Catalog | CISA

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation