CVE-2026-8364 — Gladinet Triofox Missing Authentication for Critical Functions

CVE-2026-8364

Gladinet Triofox Missing Authentication for Critical Functions PUBLISHED

Description (CNA)

Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.

Affected (CNA)

Vendor / product	Versions
Gladinet / Triofox	affected 0 before 17.3.10565.57509

CWE

CWE-306

References

https://www.tenable.com/security/research/TRA-2026-45

ADP enrichment

CISA-ADP

No English description supplied.

https://www.tenable.com/security/research/TRA-2026-45