# CVE-2025-11371

In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560

- Page: https://www.vulneraibility.com/cve/CVE-2025-11371
- CVSS: 7.5
- Known exploited: yes, in CISA KEV since 2025-11-04; CISA due date 2025-11-25
- EPSS: 92.14%
- Unvetted proof-of-concept code on GitHub: 1 Metasploit module · 3 GitHub proofs of concept · 1 Nuclei template (first 2025-10-10)
- CISA SSVC: exploitation active, automatable yes, technical impact partial (assessed 2025-11-04)
- Weakness: CWE-552
- Published: 2025-10-09

## Affected versions

- Gladinet CentreStack and TrioFox: affected <= 16.7.10368.56560

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-11371
- [mitigation] https://www.centrestack.com/p/gce_latest_release.html

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.