CVE-2025-11371 - Vulnerability Details

Related Threat Clusters

• Multiple Attackers Exploit Unpatched SharePoint Servers, Microsoft Reports

  Microsoft's DART team discovered two distinct threat actors operating simultaneously within the same victim network, complicating incident response efforts. The investigation began with ransomware activity linked to…

  5 articles · Updated June 23, 2026
• Exploitation of Triofox Vulnerability CVE-2025-12480 by Hackers

  Cyber threat actors are exploiting a critical unauthenticated access vulnerability in Gladinet’s Triofox file-sharing platform, tracked as CVE-2025-12480. This vulnerability allows unauthorized administrative access and…

  3 articles · Updated November 11, 2025
• Clop Ransomware Targets Gladinet CentreStack Servers for Data Theft

  The Clop ransomware group is conducting a data extortion campaign against Gladinet CentreStack file servers. This attack exploits multiple security vulnerabilities in CentreStack and its related product, Triofox,…

  6 articles · Updated December 19, 2025
• Exploitation of Gladinet CentreStack Cryptographic Flaw Leads to RCE Attacks

  Hackers are exploiting a cryptographic vulnerability in Gladinet's CentreStack and Triofox products, which allows for remote code execution. The flaw involves hardcoded cryptographic keys in the AES implementation,…

  4 articles · Updated December 11, 2025
• Exploitation of Triofox CVE-2025-12480 Vulnerability by Hackers

  Hackers are exploiting a critical unauthenticated access vulnerability (CVE-2025-12480) in Gladinet's Triofox file-sharing platform. This flaw allows attackers to bypass authentication and gain administrative access,…

  4 articles · Updated November 11, 2025
• CISA Alerts on Critical CVE-2025-48703 in CentOS Web Panel Exploited in Attacks

  CISA has issued a warning regarding a critical remote command execution vulnerability in CentOS Web Panel (CWP), tracked as CVE-2025-48703. This flaw is being actively exploited by threat actors, prompting CISA to add…

  2 articles · Updated November 5, 2025
• Washington Post Data Breach Linked to Oracle E-Business Suite Exploit

  The Washington Post has confirmed a data breach affecting nearly 10,000 current and former employees due to a cyberattack linked to vulnerabilities in Oracle's E-Business Suite. The breach, attributed to the Cl0p…

  50 articles · Updated December 1, 2025
• Exploitation of Triofox Vulnerability CVE-2025-12480 by UNC6485 Threat Group

  Hackers have exploited a critical unauthenticated access vulnerability (CVE-2025-12480) in Gladinet's Triofox file-sharing platform, allowing them to gain unauthorized administrative access and execute remote code. The…

  5 articles · Updated November 12, 2025
• Oracle EBS Zero-Day CVE-2025-61882 Targets Multiple Organizations

  In October 2025, the Oracle E-Business Suite (EBS) zero-day vulnerability CVE-2025-61882 was exploited by the Clop ransomware gang, affecting numerous organizations including Schneider Electric, Pan American Steel, and…

  2 articles · Updated November 6, 2025

Recent Intelligence Reports

• Microsoft Uncovers Parallel Threat Activity From Two Cyberattackers in Single Intrusion — Gbhackers · June 23, 2026
• CL0P Ransomware Group Targets Gladinet CentreStack in New Campaign — Thecyberexpress · December 19, 2025
• Gladinet servers file — Csoonline · December 12, 2025
• Active Exploitation of Gladinet CentreStack/Triofox Insecure Cryptography Vulnerability — Huntress · December 11, 2025
• Hackers abuse Triofox antivirus feature to deploy remote access tools — Bleepingcomputer · November 11, 2025
• Hackers Exploit Critical Flaw in Gladinet's Triofox File Sharing Product — Infosecurity-Magazine · November 11, 2025
• October 2025 CVE Landscape — Recordedfuture · November 6, 2025
• CISA warns of critical CentOS Web Panel bug exploited in attacks — Bleepingcomputer · November 5, 2025

Related Entities