Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Hackers Exploit Critical Flaw in Triofox File Sharing Product

Infosecurity Magazineby Kevin Poireault ()3 min read2 · 2 reads
Analyze CVE-2025-12480 with Vani AIImpact, affected versions, exploitation, mitigations and detection

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-11371
Unauthenticated Local File Inclusion in Gladinet CentreStack and Triofox
7.592%KEVPoC
KEV
CVE-2025-12480
Improper Access Control in Gladinet Triofox Exploited in the Wild
9.196%KEVPoC
KEV

From the original article

3 min read at infosecurity-magazine.com

Cyber threat actors have been exploiting a vulnerability in Gladinet’s Triofox, a file-sharing and remote access platform, and chained it with the abuse of the built-in anti-virus feature to achieve code execution. The threat activity cluster conducting the exploit is tracked as UNC6485 by Google’s Mandiant Threat Defense and Google Threat Intelligence Group (GTIG), according to a new report published on November 10.

Infosecurity Magazine

By Kevin Poireault · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.