Critical severity · published Nov 10, 2025
CVE-2025-12480
Gladinet Triofox Improper Access Control Vulnerability
In wildKEV
9.1
CVSS
95.7%
EPSS
Yes
On KEV
Description
Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)95.7% · higher than 100% of CVEs
Exploited in the wildYes
CISA KEVListed Nov 12, 2025
Federal remediation dueDec 3, 2025
Ransomware campaign useNot known
Affected products
Which versions
TR
TrioFox · TrioFox
before 16.7.10368.56560 · source: vendor, NVD, KEV
In the news
VulnerabilityHigh
[CISA KEV] CVE-2025-12480: Gladinet Triofox - Gladinet Triofox Improper Access Control Vulnerability
Gladinet Triofox contains an improper access control vulnerability that allows access to initial setup pages even after setup is complete.
TRTriofoxCVE-2025-12480
Nov 12, 2025·CISA KEV
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-12480
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-12480
CISA KEV catalogue
https://www.cisa.gov/known-exploited-vulnerabilities-catalog
third-party-advisory
https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0008.md
product
https://www.triofox.com/
release-notes
https://access.triofox.com/releases_history/
third-party-advisory
https://cloud.google.com/blog/topics/threat-intelligence/triofox-vulnerability-cve-2025-12480