CVE-2026-8359: Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS

Synopsis

A NULL function pointer dereference in Gladinet Triofox causes the server to crash when handling certain URL paths. The vulnerability is reachable over the network without any authentication or user interaction: an attacker sends a crafted HTTP request to a path starting with /status or /sysinfo, which triggers the server to call a function pointer set to NULL because WOSHttpStatusModule.dll is absent from the installation. Successful exploitation crashes the affected Triofox service, causing a denial of service. A patched-image rebuild at version 17.3.10565.57509 is available on HarborGuard for environments running an affected version.

HarborGuard Coverage

Exploit Conditions

• Network reachabilityRequired

  The attacker must reach the Triofox HTTP service over the network and send a request to a /status or /sysinfo path to trigger the crash.

• AuthenticationNot required

  No credentials or account are needed; the vulnerable code path is reachable by any unauthenticated HTTP request to the affected URL patterns.

• Victim interactionNot required

  No user action is required; the attacker triggers the crash by sending the malformed request directly to the server.

• Attack complexityDetail

  Attack complexity is low: the exploit is reliable and condition-free, requiring only a single well-formed HTTP request with no race conditions or environmental dependencies.

Blast Radius

• The Triofox server process crashes upon receiving a request to /status or /sysinfo, terminating service availability for all connected users.
• No data is read or exfiltrated during exploitation; confidentiality and integrity of stored data are unaffected.
• Repeated requests allow an attacker to keep the service in a crashed or restart loop, sustaining the denial of service indefinitely.
• All clients relying on the Triofox file-sharing service lose access for the duration of the outage.