CVE-2026-8360— Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
Possible ATT&CK Techniques 1AI
T1068 · Exploitation for Privilege EscalationGet alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-8360
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Gladinet Triofox Unchecked Return Value to NULL Pointer Dereference DOS
Source: CVE Program / CVE List V5
Vulnerability Description
Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NULL pointer is not checked before being dereferenced.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
空指针解引用
Source: CVE Program / CVE List V5
Vulnerability Title
Gladinet Triofox 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Gladinet Triofox是美国Gladinet公司的一个企业文件共享与远程访问平台。 Gladinet Triofox存在安全漏洞，该漏洞源于WOSSysInfoGetDeviceInterface函数返回空指针未检查，可能导致空指针取消引用。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2026-8360
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-8360
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-8360 (1)
Same Patch Batch · Gladinet · 2026-05-27 · 6 CVEs total
| CVE-2026-8362 | 9.8 CRITICAL | Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll |
| CVE-2026-8363 | 9.8 CRITICAL | Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDropFolder.dll |
| CVE-2026-8364 | 9.8 CRITICAL | Gladinet Triofox Missing Authentication for Critical Functions |
| CVE-2026-8359 | 7.5 HIGH | Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS |
| CVE-2026-8361 | 7.5 HIGH | Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll |
IV. Related Vulnerabilities
Same product: Triofox
- CVE-2026-8359
Gladinet Triofox WOSHttpStatusModule.dll NULL Function Point - CVE-2026-8361
Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll - CVE-2026-8362
Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHt - CVE-2026-8363
Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDro - CVE-2026-8364
Gladinet Triofox Missing Authentication for Critical Functio
Same vendor: Gladinet
- CVE-2026-8359
Gladinet Triofox WOSHttpStatusModule.dll NULL Function Point - CVE-2026-8361
Gladinet Triofox Path Traversal in WOSDefaultHttpModule.dll - CVE-2026-8362
Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHt - CVE-2026-8363
Gladinet Triofox Stack-based Buffer Overflow in WOSDeviceDro - CVE-2026-8364
Gladinet Triofox Missing Authentication for Critical Functio
Same weakness: CWE-476
- CVE-2026-45816
Apache NimBLE: NULL pointer dereference vulnerability in SMP - CVE-2026-50032
NULL Pointer Dereference in MZ Automation libIEC61850 - CVE-2026-13065
MongoDB $linearFill Window Function Improper Input Validatio - CVE-2026-13070
Improper Validation of OCSP Response During Outbound TLS Han - CVE-2026-55717
'serve-expired-client-timeout' and 'response-ip' CNAME redir
V. Comments for CVE-2026-8360
No comments yet