CVE-2026-8360

{
  "id": "CVE-2026-8360",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-27T20:16:42.713",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console).  The returned NULL pointer is not checked before being dereferenced."
    },
    {
      "lang": "es",
      "value": "Llamadas a funciones a WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() en varias DLL (es decir, WOSProfileMgrModule.dll, WOSWebDavModule.dll) pueden devolver un puntero NULL (es decir, cuando ningún usuario ha iniciado sesión en la Consola de Administración del Agente del Servidor Triofox). El puntero NULL devuelto no se verifica antes de ser desreferenciado."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Gladinet",
          "product": "Triofox",
          "defaultStatus": "unaffected",
          "versions": [
            {
              "version": "0",
              "lessThan": "17.3.10565.57509",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-27T20:25:47.386338Z",
          "id": "CVE-2026-8360",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-476"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://www.tenable.com/security/research/TRA-2026-45",
      "source": "[email protected]"
    },
    {
      "url": "https://www.tenable.com/security/research/TRA-2026-45",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}