CVE-2026-8359: falha de alta gravidade em Gladinet Triofox
Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
21Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 7.5epss 0.3%
When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin_LoadHttpModule function in the dll would be called to set up a "module" object for that module. However, WOSHttpStatusModule.dll is not present in the installation. As a result, a function pointer to WOSBin_LoadHttpModule (which would have been in the export table in WOSHttpStatusModule.dll) is set to NULL, resulting in calling a function at address 0.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
Gladinet · TriofoxCVEs relacionadas — Gladinet Triofox
No mesmo produto, das mais perigosas para as menos.
CVE-2026-8361HIGHGladinet Triofox Path Traversal in WOSDefaultHttpModule.dllEPSS 0.4%CVE-2026-8363CRITICALGladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dllEPSS 0.4%CVE-2026-8362CRITICALGladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dllEPSS 0.4%CVE-2026-8364CRITICALGladinet Triofox Missing Authentication for Critical FunctionsEPSS 0.4%CVE-2026-8360HIGHGladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOSEPSS 0.3%