CVE-2025-30406
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
94.3%
99.8th percentile
CISA KEV
Listed
Added 2025-04-08 · patch by 2025-04-29
Weakness / dates
—
Published — · modified —
Description
Gladinet CentreStack and Triofox contains a use of hard-coded cryptographic key vulnerability in the way that the application manages keys used for ViewState integrity verification. Successful exploitation allows an attacker to forge ViewState payloads for server-side deserialization, allowing for remote code execution.