---
id: "CVE-2025-12480"
kind: "vulnerability"
aliases: ["CVE-2025-12480"]
title: "gladinet triofox: Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to\u2026"
severity: "critical"
cvss: 9.1
epss: null
exploited: true
status: "open"
category: "other"
products: [{"name": "gladinet triofox", "fixed": ["16.7.10368.56560"], "affected": "< 16.7.10368.56560", "ecosystem": "vendor"}, {"name": "Gladinet Triofox", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "gladinet-triofox", "other", "self-hosted", "windows"]
not_affected_if: ["managed-hosting"]
published_at: "2025-11-10T15:15:36+00:00"
first_seen_at: "2026-10-23T19:11:51+00:00"
updated_at: "2026-10-24T00:09:50+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-12480", "first_seen_at": "2026-10-23T19:11:51+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-12480", "first_seen_at": "2026-10-23T23:44:51+00:00"}]
---

# gladinet triofox: Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to…

Gladinet Triofox, a file sharing and remote access server, exposes its initial setup pages even after setup is finished. An attacker who can reach the server could reach those setup pages and potentially reconfigure the system.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:gladinet triofox affected < 16.7.10368.56560 fixed 16.7.10368.56560
- vendor:Gladinet Triofox affected ? fixed ?

## Fix

Apply the vendor mitigation from Gladinet, or discontinue use of Triofox if no mitigation is available (per CISA KEV required action).

## Timeline

- 2026-10-23T19:11:51+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-12480
- 2026-10-23T23:44:51+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2025-12480

## From the sources

Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_