Huntress Documents Real-World Exploitation of Critical Gladinet Vulnerabilities
Malware&ThreatsSupplyChainSecurityCrushFTPCVE-2025-30406GladinetTriofox
The vulnerability, identified as CVE-2025-30406, was added to the CISA's catalog of known exploited vulnerabilities (KEV) at the beginning of April. Huntress has documented the real-world exploitation of critical Gladinet vulnerabilities. The technical details include references to CrushFTP and Triofox.