CVE-2025-12480

CISA KEV

ACT NOW Priority: 0.00 BB Relevance: 10/100

Published: N/A Modified: N/A First seen: 2026-10-29 Status: pending_score

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.

Vendor / Product Gladinet — Triofox

Date Added 2025-11-12

Remediation Due 2025-12-03

https://access.triofox.com/releases_history ; https://nvd.nist.gov/vuln/detail/CVE-2025-12480

CWE-284

Vendor	Product	Version
gladinet	triofox	< 16.7.10368.56560

US Government Resource

Third Party Advisory

https://access.triofox.com/releases_history/

Release Notes

https://www.triofox.com/

Product

Exploit Third Party Advisory

10 / 100

✓ Known exploited (KEV)
✓ High exploitation probability

Unscored

95.75%

Raw Score 0.957480

Percentile 99.9%

Date 2026-10-28

kev ref →