---
id: "CVE-2025-11371"
kind: "vulnerability"
aliases: ["CVE-2025-11371"]
title: "In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local\u2026"
severity: "high"
cvss: 7.5
epss: null
exploited: true
status: "open"
category: "vendor"
products: [{"name": "Gladinet CentreStack and Triofox", "fixed": [], "affected": "", "ecosystem": "vendor"}, {"name": "gladinet centrestack", "fixed": ["16.10.10408.56683"], "affected": "< 16.10.10408.56683", "ecosystem": "vendor"}, {"name": "gladinet triofox", "fixed": [], "affected": "<= 16.7.10368.56560", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["centrestack", "exploited", "gladinet", "self-hosted", "triofox", "vendor", "windows"]
not_affected_if: ["unknown"]
published_at: "2025-10-09T17:15:58+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-23T23:44:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-11371", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-11371", "first_seen_at": "2026-10-23T23:44:51+00:00"}]
---

# In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local…

Gladinet CentreStack and Triofox expose files or directories to outside parties, letting unauthenticated users read system files. CISA lists this as actively exploited in the wild.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:Gladinet CentreStack and Triofox affected ? fixed ?
- vendor:gladinet centrestack affected < 16.10.10408.56683 fixed 16.10.10408.56683
- vendor:gladinet triofox affected <= 16.7.10368.56560 fixed ?

## Fix

Apply the mitigations from the vendor per CISA's required action, or discontinue use of the product if mitigations are unavailable.

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-11371
- 2026-10-23T23:44:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-11371

## From the sources

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. 

This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_