Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE Vulnerability
According to Huntress, Gladinet CentreStack's Triofox remote access and collaboration solution is also affected by a previously revealed security issue that has impacted seven other organizations so far.
The vulnerability, identified as CVE-2025-30406 (CVSS score: 9.0), concerns the usage of a hard-coded cryptographic key that may allow remote code execution attacks against servers that are accessible over the internet.
On April 3, 2025, CenterStack version 16.4.10315.56368 was released, which addressed the issue. The specifics of the assaults are unknown, but it is said that the vulnerability was exploited as a zero-day in March 2025.
Huntress now claims that Gladinet Triofox versions up to 16.4.10317.56372 are also impacted by the vulnerability read more about Gladinet's Triofo...