Insecure Cryptography Vulnerability in Gladinet CentreStack and Triofox Products

CVE-2025-14611

What is CVE-2025-14611?

Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 contain hardcoded values in their AES cryptoscheme implementation, leading to weakened security for publicly exposed endpoints. This vulnerability may result in arbitrary local file inclusion through specially crafted requests that bypass authentication, potentially enabling future exploitation and system compromise when combined with existing vulnerabilities.

References