Reference page — cumulative record through Sunday, October 4, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC PR UI S C I A CVSS EPSS %ile KEV N L N N U H N N 7.5 .9214 99.8 YES
AFFECTED Product Versions Fixed CentreStack and TrioFox unspecified —
TIMELINE Oct 6 Reserved by Huntress Oct 9 Published (CNA: Huntress) Nov 4 Added to CISA KEV, remediation due 2025-11-25
In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system files. Exploitation of this vulnerability has been observed in the wild. This issue impacts Gladinet CentreStack and Triofox: All versions prior to and including 16.7.10368.56560
| Date | Event | Detail |
|---|---|---|
| October 6, 2025 | Reserved | Reserved by Huntress |
| October 9, 2025 | Published | Published (CNA: Huntress) |
| November 4, 2025 | KEV ADDED | Added to CISA KEV, remediation due 2025-11-25 |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| Gladinet | CentreStack and TrioFox | — | — | — |
Authoritative record: CVE-2025-11371 at cve.org
Vendors: gladinet
Weaknesses: CWE-552
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2025-11371 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Sunday, October 4, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.
