Approved changes feed: RSS · Atom

cpe:2.3:a:gladinet:triofox:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGladinet (77997637-aa7e-5329-beb7-1fab943d6dae)
ProductTriofox (adeb16eb-134c-51ea-9b05-0d55901e8626)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-8364 vulnerable 2026-06-08 08:08:58.310436 Gladinet Triofox Missing Authentication for Critical Functions
CRITICAL (9.8)
Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.
Published: 2026-05-27T19:38:01.455Z
Updated: 2026-05-28T03:56:02.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8363 vulnerable 2026-06-08 08:08:58.310176 Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll
CRITICAL (9.8)
A stack-based buffer overflow condition exists in WOSDeviceDropFolder.dll when processing a long URL path starting with /resources:
Published: 2026-05-27T19:40:33.139Z
Updated: 2026-05-28T03:56:00.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8362 vulnerable 2026-06-08 08:08:58.310024 Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll
CRITICAL (9.8)
A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome
Published: 2026-05-27T19:42:08.859Z
Updated: 2026-05-28T13:27:02.062Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8361 vulnerable 2026-06-08 08:08:58.309759 Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll
HIGH (7.5)
A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome
Published: 2026-05-27T19:44:38.581Z
Updated: 2026-05-27T20:24:45.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8360 vulnerable 2026-06-08 08:08:58.309578 Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
HIGH (7.5)
Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NULL pointer is not checked before being dereferenced.
Published: 2026-05-27T19:47:29.646Z
Updated: 2026-05-27T20:25:57.857Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-8359 vulnerable 2026-06-08 08:08:58.309206 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14611 vulnerable 2026-06-08 07:06:34.834051 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12480 vulnerable 2026-06-08 07:04:30.299437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-11371 vulnerable 2026-06-08 07:02:28.669928 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.