CVE-2025-12480

🔥 Known Exploited (CISA KEV)CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2025-11-10

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.

Affected Platforms (CPE)

📦

Gladinet

Triofox

< 16.7.10368.56560

References & Advisories

🔗 https://access.triofox.com/releases_history/

🔗 https://cloud.google.com/blog/topics/threat-intelligence/triofox-vulnerability-cve-2025-12480

🔗 https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0008.md

🔗 https://www.triofox.com/

🔗 https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-12480

Vulnerability Description

Affected Platforms (CPE)

Triofox

References & Advisories

Related Vulnerabilities