Vulnerability in WOSHttpStatusModule.dll Affects Web Application Firewall
CVE-2026-8359

7.5HIGH

Key Information:

Vendor

Gladinet

Status
Triofox
Vendor
CVE Published:
27 May 2026

What is CVE-2026-8359?

When a request with a URL path that begins with /status or /sysinfo is processed, the system attempts to load the WOSHttpStatusModule.dll. However, this DLL is missing in the installation, leading to a NULL function pointer. Consequently, the call to a function intended for module initialization fails, which could pose risks for web application firewall integrity.

Affected Version(s)

Triofox 0 < 17.3.10565.57509

References

https://www.tenable.com/security/research/TRA-2026-45

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.