Null Pointer Dereference Vulnerability in Triofox Server Agent Management Console

CVE-2026-8360

What is CVE-2026-8360?

The Triofx Server Agent Management Console is susceptible to a null pointer dereference vulnerability due to unverified function calls to WOSCommonUtil.dll!WOSSysInfoGetDeviceInterface(). If no user is logged into the console, the function returns a NULL pointer, which is subsequently dereferenced without proper checks. This oversight poses a risk for potential crashes and service disruptions, urging users to remain vigilant and apply necessary mitigations.

References