PT-2026-44094 · Gladinet · Triofox

Published 2026-05-27 · Updated 2026-05-27 · CVE-2026-8360

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Gladinet Triofox (affected versions not specified)

Description Certain DLLs, including 'WOSProfileMgrModule.dll' and 'WOSWebDavModule.dll', make function calls to WOSSysInfoGetDeviceInterface() within 'WOSCommonUtil.dll'. These calls can return a NULL pointer, specifically when no user is logged into the Triofox Server Agent Management Console. The software fails to check for this NULL pointer before dereferencing it, which can lead to a Denial of Service (DOS) condition.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-8360

Affected Products

Triofox

References · 4

• 🔥 https://tenable.com/security/research/TRA-2026-45 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-8360 · Security Note
• https://t.me/CVEtracker/55162 · Telegram Post
• https://t.me/cveNotify/164941 · Telegram Post