Triofox
Vendor:
First CVE: Oct 9, 2025 · Active for under a year
9
Total CVEs
More Total CVEs than 88% of tracked products
4.5
Avg CVEs / Year
Higher CVE frequency than 88% of tracked products
8.7
Avg CVSS
Higher Avg CVSS than 79% of tracked products
33.3%
KEV Rate
Higher KEV Rate than 99% of tracked products
Trends Over Time
The number and severity of CVEs published that impact Triofox over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 9, 2025
9 months ago
Most Recent CVE
May 27, 2026
62 days ago
CVE Severity & Scoring
Triofox9 CVEs
44%
56%
All CVEs353,173 CVEs
45%
40%
11%
HighCritical
Attack Vector
Local0 (0.0%)
Network9 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low9 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None9 (100.0%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (9 CVEs).
9 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2025-11371HIGH In the default installation and configuration of Gladinet CentreStack and TrioFox, there is an unauthenticated Local File Inclusion Flaw that allows unintended disclosure of system | Oct 9, 2025 | 7.5 | 98 | YES | YES |
CVE-2025-12480CRITICAL Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete. | Nov 10, 2025 | 9.1 | 97 | YES | YES |
CVE-2025-14611CRITICAL Gladinet CentreStack and Triofox prior to version 16.12.10420.56791 used hardcoded values for their implementation of the AES cryptoscheme. This degrades security for public expose | Dec 12, 2025 | 9.8 | 96 | YES | YES |
CVE-2026-8362CRITICAL A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome | May 27, 2026 | 9.8 | 35 | NO | NO |
CVE-2026-8363CRITICAL A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources: | May 27, 2026 | 9.8 | 35 | NO | NO |
CVE-2026-8364CRITICAL Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, | May 27, 2026 | 9.8 | 35 | NO | NO |
CVE-2026-8359HIGH When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin_LoadHttpModule function | May 27, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-8360HIGH Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no use | May 27, 2026 | 7.5 | 28 | NO | NO |
CVE-2026-8361HIGH A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome | May 27, 2026 | 7.5 | 28 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (9 CVEs).
CISA KEV
3 CVEs
33.3% of CVEs· 99th percentile
Metasploit
2 CVEs
22.2% of CVEs· 98th percentile
Nuclei
3 CVEs
33.3% of CVEs· 98th percentile
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (9 CVEs).
Media Mentions
Signals from CVEs in this product scope (9 CVEs).
Top CNAs Publishing CVEs For Triofox
Top CWEs
Versions
No cataloged versions.