CVE-2025-12480

Producto

Gladinet / Triofox

Vulnerabilidad

Gladinet Triofox Improper Access Control Vulnerability

Añadido a KEV

12 nov 2025

Remediar antes de

3 dic 2025

Uso conocido en ransomware

No

Descripción resumida

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.

Acción requerida

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Notas

https://access.triofox.com/releases_history ; https://nvd.nist.gov/vuln/detail/CVE-2025-12480