High · published October 9, 2025
CVSS calls it high at 7.5. It is confirmed in active exploitation. It sits in the 99.8th percentile for exploit probability.
🚨 A sneaky Local File Inclusion flaw in Gladinet CentreStack and TrioFox can spill sensitive system files with zero authentication needed! ⚡ Think of it like a restaurant where the staff hands out menus with secret recipes inside — anyone could just walk in and read them without even checking in at the front! This vulnerability means an attacker could access critical system files, potentially exposing sensitive data and configuration settings. The implications could be absolutely devastating, as this uncovers your system's inner workings for malicious use. Act now to prevent a breach!
Think of it like a restaurant where the staff hands out menus with secret recipes inside — anyone could just walk in and read them without even checking in at the front! The Local File Inclusion (LFI) vulnerability allows attackers to view files stored on the server by manipulating file paths, taking advantage of the default installation settings in Gladinet CentreStack and TrioFox.
This vulnerability means an attacker could access critical system files, potentially exposing sensitive data and configuration settings. The implications could be absolutely devastating, as this uncovers your system's inner workings for malicious use. Act now to prevent a breach! Immediately patch your installations to version 16.7.10368.56561 or higher. Ensure your configuration settings are hardened against unauthorized file access. Regularly audit your systems for any signs of exploitation! You've got this! By taking these steps, you’ll secure your system and protect your data. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| gladinet/centrestack | < 16.10.10408.56683 | 16.10.10408.56683 |
| gladinet/triofox | ≤ 16.7.10368.56560 | — |