RansomwarecriticalExploited in the wild

CLOP targets Gladinet CentreStack servers in large

Security Affairsby @securityaffairsDec 19, 2025 · 11:48 UTC (Dec 19, 2025)3 min read4 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2025-11371 CVE-2025-30406 CVE-2025-61882 CVE-2023-0669 CVE-2023-34362

Tags: cve-2025-11371 cve-2025-30406 cve-2025-61882 cve-2023-0669 cve-2023-34362 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-0669	Pre-Authentication Deserialization RCE in Fortra GoAnywhere MFT	7.2	100%	KEVRansomwarePoC ×3	Feb 6, 2023 KEV Feb 10, 2023
CVE-2023-34362	Unauthenticated SQL Injection in Progress MOVEit Transfer	9.8	100%	KEVRansomwarePoC	Jun 2, 2023 KEV Jun 2, 2023
CVE-2025-11371	Unauthenticated Local File Inclusion in Gladinet CentreStack and Triofox	7.5	92%	KEVPoC	Oct 9, 2025 KEV Nov 4, 2025
CVE-2025-30406	Hard-coded machineKey enables unauthenticated deserialization RCE in Gladinet CentreStack and Triofox	9.8	94%	KEV	Apr 3, 2025 KEV Apr 8, 2025
CVE-2025-61882	Unauthenticated Takeover of Oracle E-Business Suite Concurrent Processing	9.8	100%	KEVRansomware	Oct 5, 2025 KEV Oct 6, 2025

From the original article

3 min read at securityaffairs.com

The Clop ransomware group is targeting Gladinet CentreStack file servers in a new large-scale extortion campaign. The Clop ransomware group is targeting Gladinet CentreStack file servers in a new large-scale extortion campaign aimed at stealing sensitive data from organizations worldwide.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.