Description
CVE-2025-30406 是由 CentreStack 门户的硬编码 machineKey使用导致的反序列化漏洞。攻击者可以通过该漏洞获取服务器权限，执行任意命令。
CentreStack 存在反序列化漏洞（CVE-2025-30406）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-30406
https://www.huntress.com/blog/cve-2025-30406-critical-gladinet-centrestack-triofox-vulnerability-exploited-in-the-wild
https://gladinetsupport.s3.us-east-1.amazonaws.com/gladinet/securityadvisory-cve-2005.pdf
https://www.centrestack.com/p/gce_latest_release.html
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-30406
https://www.tenable.com/cve/CVE-2025-30406
https://blackpointcyber.com/blog/blog-racing-to-exploit-centrestacks-cve-2025-30406/
https://github.com/runZeroInc/nuclei-templates/blob/main/http/cves/2025/CVE-2025-30406.yaml
https://cve.imfht.com/detail/CVE-2025-30406
https://www.cybersecuritydive.com/news/attackers-exploit-zero-day-gladinet-centrestack-file-sharing/745407/