Active Attacks Exploit Gladinet's Hard-Coded Keys for Unauthorized Access and Code Execution

Huntress discovered an actively exploited vulnerability in Gladinet's CentreStack and Triofox products involving hard-coded cryptographic keys. The vulnerability allows threat actors to access web.config files, potentially leading to deserialization attacks and remote code execution. Nine organizations have been affected by active attacks exploiting this security flaw. The hard-coded keys create a significant security risk by providing unauthorized access to sensitive system configurations.