Description
Gladinet CentreStack 和 TrioFox 是一款云存储和文件共享解决方案。默认安装和配置中存在一个未认证的本地文件包含漏洞，攻击者可以通过特制的请求访问系统文件，导致敏感信息泄露。该漏洞影响所有版本的 Gladinet CentreStack 和 TrioFox，版本号为 16.7.10368.56560 及之前的版本。
Gladinet CentreStack & TrioFox /storage/t.dn 目录遍历漏洞（CVE-2025-11371）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-11371
https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw
https://www.cve.org/CVERecord?id=CVE-2025-11371
https://horizon3.ai/attack-research/vulnerabilities/cve-2025-11371/
https://thehackernews.com/2025/10/from-lfi-to-rce-active-exploitation.html
https://www.rapid7.com/db/modules/auxiliary/gather/gladinet_storage_path_traversal_cve_2025_11371/
https://www.sentinelone.com/vulnerability-database/cve-2025-11371/
https://www.broadcom.com/support/security-center/attacksignatures/detail?asid=35281
https://www.finra.org/rules-guidance/guidance/cybersecurity-alert-gladinet-centrestack-triofox-vulnerabilities-20260129
https://www.helpnetsecurity.com/2025/10/10/gladinet-centrestack-vulnerability-exploited-cve-2025-11371/
https://github.com/rxerium/CVE-2025-11371
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-11371
https://www.centrestack.com/p/gce_latest_release.html