CISA Adds Gladinet and CWP Flaws to KEV Catalog Amid Active Exploitation Evidence

According to CISA, the U.S. Cybersecurity and Infrastructure Security Agency, two security flaws affecting Gladinet CentreStack/Triofox and Control Web Panel (CWP) have been added to the Known Exploited Vulnerabilities (KEV) catalog amid evidence of active exploitation in the wild.

The bugs are CVE-2025-11371, with a CVSS score of 7.5, described as a flaw in files or directories accessible to external parties in Gladinet CentreStack and Triofox that could lead to unintended disclosure of system files, and CVE-2025-48703, with a CVSS score of 9.0, an operating system command injection in CWP that enables unauthenticated remote code execution via shell metacharacters in a specific request.

The article notes that cybersecurity firm Huntress had earlier said it detected active exploitation targeting CVE-2025-11371, while details about CVE-2025-48703 were published by security researcher Maxime Rinaudo in June 2025 after a patch in version 0.9.8.1205. In light of the active exploitation, Federal Civilian Executive Branch agencies are required to apply the necessary fixes by 25 November 2025 to secure their networks.