All Huntress Blog Posts

All things cybersecurity engaging and accessible - so you can stay ahead of hackers and boost your cybersecurity savviness.

Author: Bryan Masters
Rapid Response & Vulnerabilities
Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability
Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability

Gladinet CentreStack is being actively exploited, with the cl0p ransomware group now reportedly targeting internet-facing servers. Huntress has been tracking this from the start and has the latest updates.

December 18, 2025
Active Exploitation of Gladinet CentreStack and Triofox Local File Inclusion Flaw (CVE-2025-11371)
Active Exploitation of Gladinet CentreStack and Triofox Local File Inclusion Flaw (CVE-2025-11371)

A local file inclusion flaw in Gladinet CentreStack and Triofox was actively exploited before a patch existed. Huntress documented the vulnerability, the exploitation activity, and what to do now.