VulnerabilitycriticalExploited in the wild

Hackers Exploiting Triofox Flaw to Install Remote Access Tools via Antivirus Feature

The Hacker Newsby @TheHackersNewsNov 10, 2025 · 20:49 UTC (Nov 10, 2025)2 min read2 · 1 read

Read at thehackernews.com

Analyze CVE-2025-12480 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-12480 CVE-2025-30406 CVE-2025-11371

Tags: cve-2025-12480 cve-2025-30406 cve-2025-11371 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-11371	Unauthenticated Local File Inclusion in Gladinet CentreStack and Triofox	7.5	92%	KEVPoC	Oct 9, 2025 KEV Nov 4, 2025
CVE-2025-12480	Improper Access Control in Gladinet Triofox Exploited in the Wild	9.1	96%	KEVPoC	Nov 10, 2025 KEV Nov 12, 2025
CVE-2025-30406	Hard-coded machineKey enables unauthenticated deserialization RCE in Gladinet CentreStack and Triofox	9.8	94%	KEV	Apr 3, 2025 KEV Apr 8, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Nov 10, 2025 Vulnerability / Incident Response Google's Mandiant Threat Defense on Monday said it discovered n-day exploitation of a now-patched security flaw in Gladinet's Triofox file-sharing and remote access platform. The critical vulnerability, tracked as CVE-2025-12480 (CVSS score: 9.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.