Vulnerabilitycritical
Attackers exploited another Gladinet Triofox vulnerability (CVE-2025-12480)
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2025-11371 | Unauthenticated Local File Inclusion in Gladinet CentreStack and Triofox | 7.5 | 92% | KEVPoC | KEV |
| CVE-2025-12480 | Improper Access Control in Gladinet Triofox Exploited in the Wild | 9.1 | 96% | KEVPoC | KEV |
| CVE-2025-30406 | Hard-coded machineKey enables unauthenticated deserialization RCE in Gladinet CentreStack and Triofox | 9.8 | 94% | KEV | KEV |
| CVE-2025-31161 | Authentication Bypass in CrushFTP File Transfer Servers (CVE-2025-31161) | 9.8 | 100% | KEVRansomwarePoC ×5 | KEV |
From the original article
3 min read at helpnetsecurity.com
Attackers have exploited yet another vulnerability (CVE-2025-12480) in the Gladinet Triofox secure file sharing and remote access platform, Mandiant revealed on Monday. Gladinet’s Triofox solution is used by medium and large businesses to securely share files and allow users to access them without a VPN.
By @zeljkazorz · helpnetsecurity.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.