← gociux.comall vendors

Vendor scorecard

Gladinet exploited vulnerabilities: 4 in CISA KEV, 1 in the last 12 months

Gociux · updated with each KEV addition · latest 15 Dec 2025

CISA lists 4 Gladinet vulnerabilities as exploited in the wild, 1 of them added in the last 12 months (down from 3 in the 12 months before). 0 (0%) are known to be used in ransomware campaigns. For entries added in the last two years, the median time from CVE publication to the KEV listing was 4 days. Most affected: CentreStack and Triofox (2), Triofox (1), CentreStack (1).

4in CISA KEV
1last 12 months
0%ransomware-linked
4dpublication → KEV (median)

Exploited CVEs added per year

000040
202120222023202420252026

Most affected products

ProductKEV entries
CentreStack and Triofox2
Triofox1
CentreStack1

Every exploited Gladinet CVE

CVEVulnerabilityAdded
CVE-2025-14611Gladinet CentreStack and Triofox Hard Coded Cryptographic VulnerabilityCentreStack and Triofox15 Dec 2025
CVE-2025-12480Gladinet Triofox Improper Access Control VulnerabilityTriofox12 Nov 2025
CVE-2025-11371Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties VulnerabilityCentreStack and Triofox4 Nov 2025
CVE-2025-30406Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key VulnerabilityCentreStack8 Apr 2025

Get an email when CISA adds the next Gladinet CVE.

How to read this: CISA KEV lists vulnerabilities with reliable evidence of exploitation; a vendor with many entries is often one with a large, internet-facing install base, not necessarily worse engineering. "Publication → KEV" is the median number of days between the CVE's publication and its addition to KEV, for entries added in the last 24 months (4 entries); it is an upper bound on how long defenders had, since exploitation usually starts before the listing. Under NIS2 article 21(2)(d), supplier security is part of your risk management; this page is a starting point for that review. Compare vendors on the scorecard index.

Reviewing Gladinet as a supplier?

We assess supplier security for NIS2 and DORA, from exploited-CVE history and patch response to contract clauses and evidence packs.

Get in touch →