{"vulnerability": "CVE-2025-14611", "sightings": [{"uuid": "279dedf4-778e-4826-b11b-d3e352ae9d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3meuci6pufs2w", "content": "", "creation_timestamp": "2026-02-15T00:42:21.224596Z"}, {"uuid": "94fd2760-fbe8-4958-9d6b-654152e21ade", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115708714230069747", "content": "", "creation_timestamp": "2025-12-12T21:27:43.613637Z"}, {"uuid": "fc7ea887-0eb9-4f5f-8940-e18396a48c59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3m7t36iphh522", "content": "", "creation_timestamp": "2025-12-12T21:53:00.114752Z"}, {"uuid": "1e348e61-4cb5-4467-ab3a-e387965c7138", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-14611", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115709921163895685", "content": "", "creation_timestamp": "2025-12-13T02:34:41.091545Z"}, {"uuid": "7621086d-4004-48a4-a165-39c144337158", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-14611", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m7tkw77yrl2f", "content": "", "creation_timestamp": "2025-12-13T02:34:42.416535Z"}, {"uuid": "61bf3429-86cc-4e3a-9f8f-51330982405f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://infosec.exchange/users/DarkWebInformer/statuses/115725796616529052", "content": "", "creation_timestamp": "2025-12-15T21:52:00.214466Z"}, {"uuid": "e086af0a-6095-40e0-a042-87737da51f9c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://www.acn.gov.it/portale/w/gladinet-rilevato-sfruttamento-attivo-di-vulnerabilita-in-centrestack-e-triofox", "content": "", "creation_timestamp": "2025-12-16T08:41:52.000000Z"}, {"uuid": "9bf8b0c5-3a34-4b00-9e3a-cfd5422d8c84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-14611.yaml", "content": "", "creation_timestamp": "2025-12-17T09:45:30.000000Z"}, {"uuid": "c853d3e4-8def-4aa7-abbd-a751c18e6352", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3maelnij5l722", "content": "", "creation_timestamp": "2025-12-19T21:03:12.470766Z"}, {"uuid": "75319fbf-241f-483f-af51-f4187106a1fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mahgpsltkc2b", "content": "", "creation_timestamp": "2025-12-21T00:12:49.044148Z"}, {"uuid": "68040419-28ab-48d3-bc42-3c5ff534066e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3mahmf4qnvc2l", "content": "", "creation_timestamp": "2025-12-21T01:54:26.816643Z"}, {"uuid": "acbd28a4-2c03-4268-b72c-840775fa2800", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/5922970", "content": "", "creation_timestamp": "2026-03-04T01:42:38.341511Z"}, {"uuid": "0a58d430-ea29-470e-83b3-a0ce7bdbd39b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-14611", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/8e6e8ce9-4749-434a-b6b9-8e330185c090", "content": "", "creation_timestamp": "2026-02-02T12:25:44.382494Z"}, {"uuid": "1aa0d2e6-2e61-4fdb-a45a-95d42865c462", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "published-proof-of-concept", "source": "Telegram/eVvhaJFWkr38E-_ZYlB5tct_w5DnUOBRk4Xc33lUJhrEK3M", "content": "", "creation_timestamp": "2025-12-29T15:00:08.000000Z"}, {"uuid": "a35f5339-0d22-4b87-baa2-9bdc9420c5fc", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/e68b6f82-2375-47df-a97e-3c69c7c1e7d9", "content": "", "creation_timestamp": "2026-06-19T12:45:20.690386Z"}, {"uuid": "63ca24d1-f50c-4268-9d26-f19898d93d05", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9dcc9ea0-e02f-4a5b-abc1-8b88806709ca", "content": "", "creation_timestamp": "2026-06-23T14:03:46.427457Z"}, {"uuid": "f3002418-1e60-4675-9afc-b60894b0d0ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-14611", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/gladinet_storage_access_ticket_forge.rb", "content": "{\"actions\": [{\"description\": \"Read Web.config and extract the machineKey for RCE\", \"name\": \"EXTRACT_MACHINEKEY\"}, {\"description\": \"Read an arbitrary file from the target\", \"name\": \"READ_FILE\"}], \"aliases\": [], \"arch\": \"\", \"author\": [\"Huntress Team\", \"Valentin Lobstein \", \"Julien Voisin\"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module forges access tickets for the Gladinet CentreStack/Triofox\\n          `/storage/filesvr.dn` endpoint. The vulnerability exists because\\n          the application uses hardcoded cryptographic keys in GladCtrl64.dll to encrypt/decrypt\\n          access tickets.\\n\\n          The access ticket is an encrypted string that contains:\\n          - Filepath: The absolute path to the file on the server\\n          - Username: Empty (Application Pool Identity will be used)\\n          - Password: Empty\\n          - Timestamp: Creation time (set to excessive year to never expire)\\n\\n          This module can forge tickets to read arbitrary files from the server's file system.\\n\\n          Gladinet CentreStack versions up to 16.12.10420.56791 are vulnerable.\\n          Gladinet Triofox versions up to 16.12.10420.56791 are vulnerable.\", \"disclosure_date\": \"2025-12-10\", \"fullname\": \"auxiliary/gather/gladinet_storage_access_ticket_forge\", \"is_install_path\": true, \"mod_time\": \"2026-05-26 13:05:42 +0000\", \"name\": \"Gladinet CentreStack/Triofox Access Ticket Forge\", \"needs_cleanup\": false, \"notes\": {\"Reliability\": [], \"SideEffects\": [\"ioc-in-logs\"], \"Stability\": [\"crash-safe\"]}, \"path\": \"/modules/auxiliary/gather/gladinet_storage_access_ticket_forge.rb\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/gladinet_storage_access_ticket_forge\", \"references\": [\"CVE-2025-14611\", \"URL-https://www.huntress.com/blog/active-exploitation-gladinet-centrestack-triofox-insecure-cryptography-vulnerability\"], \"rport\": 80, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:14.981524Z"}]}