Description
在 Gladinet CentreStack 和 TrioFox的默认安装和配置中，存在一个未经身份验证的本地文件包含漏洞，可能导致系统文件的意外泄露。已经观察到针对此漏洞的利用行为。此问题影响 GladinetCentreStack 和 Triofox 的所有版本，包括 16.7.10368.56560 版本。
CentreStack 本地文件包含漏洞(CVE-2025-11371)
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-11371
https://www.huntress.com/blog/gladinet-centrestack-triofox-local-file-inclusion-flaw
https://horizon3.ai/attack-research/vulnerabilities/cve-2025-11371/
https://www.tenable.com/cve/CVE-2025-11371
https://www.helpnetsecurity.com/2025/10/10/gladinet-centrestack-vulnerability-exploited-cve-2025-11371/
https://cve.imfht.com/intel/476838
https://blog.csdn.net/m0_50125527/article/details/153722344
https://www.centrestack.com/p/gce_latest_release.html
https://github.com/advisories/GHSA-hj6h-fpv2-5h4v
https://www.redlegg.com/blog/security-bulletin-gladinet-centrestack-/-triofox-local-file-inclusion-vulnerability