CVE-2025-12480
Improper Access Control in Gladinet Triofox. CISA confirmed attackers exploit it and added it to its Known Exploited Vulnerabilities catalog on 12 November 2025.
- Product
- Gladinet Triofox
- Added to CISA's catalog
- Federal fix-by date
- Ransomware
- No known use in ransomware campaigns
- Vendor advisories
- Sources
- CISA’s catalog, NVD entry
CISA’s description.
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.
More from Gladinet this year.
- CVE-2025-14611 Hard Coded Cryptographic, added
- CVE-2025-11371 Files or Directories Accessible to External Parties, added
Every flaw CISA confirmed exploited in the last 30 days is on the exploit watch. This is not security advice. Check the vendor’s advisory before acting. From CISA’s catalog of 3 November 2026.