Gladinet’s Security Fiasco: Triofox and CentreStack Vulnerability Exposes Organizations to Cyber Attacks
Gladinet Triofox users, brace yourselves! A security flaw tracked as CVE-2025-30406, with a chilling CVSS score of 9.0, has been uncovered. It exploits hard-coded cryptographic keys, making remote code execution attacks a breeze. Update now or risk becoming a hacker’s latest accessory in the cyber fashion show.

Hot Take:
Who knew hard-coding cryptographic keys in software was a bad idea? Apparently, not Gladinet! This vulnerability is like leaving the keys to your house under the doormat, except the house is the internet and the doormat is… also the internet. Time to grab some popcorn and watch the chaos unfold!
Key Points:
- Gladinet’s CentreStack and Triofox solutions are vulnerable due to a hard-coded cryptographic key.
- The flaw, tracked as CVE-2025-30406, boasts a CVSS score of 9.0, signaling critical severity.
- Seven organizations have been compromised, with the vulnerability being actively exploited.
- The issue has been patched in CentreStack version 16.4.10315.56368, released on April 3, 2025.
- Users are urged to update to the latest versions to avoid becoming part of the cyber circus.
Already a member? Log in here