CVE-2025-30406 is a critical vulnerability in Gladinet CentreStack and Triofox involving the use of a hard-coded cryptographic key for ViewState integrity verification. This flaw allows attackers to forge ViewState payloads, leading to server-side deserialization and remote code execution. The vulnerability has a high CVSS score of 9.0 and is known to be exploited in the wild.