CVE-2025-12480
GL
Gladinet Triofox
Gladinet Triofox Improper Access Control Vulnerability
What it is
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.
What to do
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.
Other Gladinet entries on the list
- CentreStack and Triofox Gladinet CentreStack and Triofox Hard Coded Cryptographic Vulnerability CVE-2025-14611 · Dec 15, 2025
- CentreStack and Triofox Gladinet CentreStack and Triofox Files or Directories Accessible to External Parties Vulnerability CVE-2025-11371 · Nov 4, 2025
- CentreStack Gladinet CentreStack and Triofox Use of Hard-coded Cryptographic Key Vulnerability CVE-2025-30406 · Apr 8, 2025