CVE-2026-8360

Description

Function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface() in various DLLs (i.e., WOSProfileMgrModule.dll, WOSWebDavModule.dll) can return a NULL pointer (i.e., when no user is logged into the Triofox Server Agent Management Console). The returned NULL pointer is not checked before being dereferenced.

CVSS Vector

References

• https://www.tenable.com/security/research/TRA-2026-45
• https://www.tenable.com/security/research/TRA-2026-45