Vendor
Gladinet
4 of 4 Gladinet CVEs in Patchfirst (100%) are in CISA KEVThe US Cybersecurity and Infrastructure Security Agency’s list of Known Exploited Vulnerabilities. A CVE is added when CISA has evidence that attackers are using it. of vulnerabilities exploited in the wild.
- CVEs
- 4
- In CISA KEV
- 4100%
- Known ransomware use
- 0
- Median days to KEV
- 4
- from publication
- Latest KEV listing
- 15 Dec 2025
Products
In KEVOther CVEs
- CentreStack and Triofox In KEV: 2 CVEs: 2
- CentreStack In KEV: 1 CVEs: 1
- Triofox In KEV: 1 CVEs: 1
Top ATT&CK techniques
What attackers do with Gladinet CVEs- T1190Exploit Public-Facing Application CVEs: 3
- T1005Data from Local System CVEs: 2
- T1078Valid Accounts CVEs: 1
- T1059Command and Scripting Interpreter CVEs: 1
Counts are Gladinet CVEs linked to the technique. Each link’s provenance is on the CVE page.
Gladinet CVEs
4 CVEs, by priority- CVE-2025-11371Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityGladinet · CentreStack and TriofoxKEVPublic exploitHigh · 7.5T1190Exploit Public-Facing ApplicationT1005Data from Local System92.1%Top 0.18%78.2priority
- CVE-2025-14611Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityGladinet · CentreStack and TriofoxKEVPublic exploitCritical · 9.8T1190Exploit Public-Facing ApplicationT1005Data from Local System53.3%Top 1%74.7priority
- CVE-2025-12480Gladinet Triofox Improper Access Control VulnerabilityGladinet · TriofoxKEVPublic exploitCritical · 9.1T1190Exploit Public-Facing ApplicationT1078Valid Accounts95.7%Top 0.13%74.3priority
- CVE-2025-30406Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability94.3%Top 0.15%69.8priority