CVE-2025-12480

Gladinet Triofox Improper Access Control Vulnerability

Triofox

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

10. Nov 2025

Ausgewertete Quellen

• Hinweis
  https://cloud.google.com/blog/topics/threat-intelligence/triofox-vulnerability-cve-2025-12480
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-12480
• CISA
  Gladinet Triofox Improper Access Control Vulnerability
• NVD
  CVE-2025-12480
• GitHub
  https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0008.md