CVE-2025-12480 Gladinet Triofox Improper Access Control
Attackers can access initial setup pages after installation, potentially bypassing security controls in Triofox file sharing software.
- Exploited in the wild
- Since 12 Nov 2025
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-12480?
CVE-2025-12480 is a critical missing authorization vulnerability in TrioFox, published on 10 Nov 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.
Weakness: CWE-284
Which versions are affected by CVE-2025-12480?
It affects 1 product.
Products include Gladinet Triofox.
How do I fix CVE-2025-12480?
No fix has been published for CVE-2025-12480 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 3 Dec 2025.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-12480 being exploited?
Yes. Attackers have exploited CVE-2025-12480 in the wild since at least 12 Nov 2025.
Public exploit code: 1 Nuclei template.
Sources
Also known as GHSA-26hx-622f-3855.