PT-2026-44094 · Gladinet · Triofox
CVE-2026-8360
·
Published
2026-05-27
·
Updated
2026-05-27
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Gladinet Triofox (affected versions not specified)
Description
Certain DLLs, including 'WOSProfileMgrModule.dll' and 'WOSWebDavModule.dll', make function calls to
WOSSysInfoGetDeviceInterface() within 'WOSCommonUtil.dll'. These calls can return a NULL pointer, specifically when no user is logged into the Triofox Server Agent Management Console. The software fails to check for this NULL pointer before dereferencing it, which can lead to a Denial of Service (DOS) condition.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
DoS
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Triofox