Description
Triofox versions prior to 16.7.10368.56560, are vulnerable to an Improper Access Control flaw that allows access to initial setup pages even after setup is complete.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
TrioFox TrioFox
Default version status: unaffected
0 to < 16.7.10368.56560affected
References
- https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0008.md ↗
- https://www.triofox.com/ ↗
- https://access.triofox.com/releases_history/ ↗
- https://cloud.google.com/blog/topics/threat-intelligence/triofox-vulnerability-cve-2025-12480 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-12480 ↗