Research · Nov 10, 2025 · ZeroDay Catalog
Improper Access Control Vulnerability in Gladinet Triofox
Gladinet has identified an improper access control vulnerability in Triofox that could expose sensitive setup pages post-configuration.
What changed
Gladinet has disclosed a vulnerability in Triofox that affects versions prior to 16.7.10368.56560. This flaw pertains to improper access control, enabling unauthorized access to initial setup pages even after the setup process has been completed.
Who is affected
Organizations utilizing Gladinet Triofox versions earlier than 16.7.10368.56560 are at risk. This vulnerability could potentially expose sensitive configuration details to unauthorized users.
- Gladinet Triofox users
- IT departments managing file sharing solutions
- Organizations relying on secure access controls for sensitive data
What to do
It is crucial for affected users to upgrade to the latest version of Triofox to mitigate this vulnerability. Regularly reviewing access controls and configurations can also help prevent unauthorized access.
- Upgrade Triofox to version 16.7.10368.56560 or later
- Review and tighten access control settings
- Monitor for any unauthorized access attempts