Is CVE-2026-8364 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-8364 being exploited in the wild.

How severe is CVE-2026-8364?

Critical severity, with a CVSS score of 9.8, published 27 May 2026.

Which products and versions are affected?

Gladinet Triofox Server Agent 17.1.10488.57063.

Is there a fix for CVE-2026-8364?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-8364 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-8364?

Check whether you run Gladinet Triofox Server Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-8364: Gladinet Triofox Server Agent missing authentication in Access Service

CVE-2026-8364 · Severity: critical · CVSS 9.8 · Published 2026-05-27

Gladinet Triofox Server Agent, a tool used to provide secure remote access to file servers, contains a vulnerability where its management service fails to require authentication. An attacker can remotely connect to the service to view, modify, or delete files on the server's mapped drives and change critical system settings. This could lead to the complete compromise of sensitive corporate data and the disruption of file-sharing operations.

Technologies: Gladinet Triofox Server Agent. Vendors: Gladinet.

Quick answers

Is CVE-2026-8364 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-8364 being exploited in the wild.
How severe is CVE-2026-8364?: Critical severity, with a CVSS score of 9.8, published 27 May 2026.
Which products and versions are affected?: Gladinet Triofox Server Agent 17.1.10488.57063.
Is there a fix for CVE-2026-8364?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-8364 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-8364?: Check whether you run Gladinet Triofox Server Agent at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

The Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages without requiring authentication (CWE-306). An unauthenticated remote attacker can interact with several endpoints, including /resources and /Settings, to perform file operations (list, view, add, change, delete) on the mapped Triofox Drive or manipulate the local SQLite configuration database (gsettings.db). Furthermore, attackers can exploit the /profile endpoint to perform administrative actions such as adding users. In some configurations, these requests can trigger authenticated communications with the Triofox web portal using the credentials of the currently logged-in management console user.

Affected products

Gladinet Triofox Server Agent 17.1.10488.57063

Timeline

2026-05-27: advisory: Tenable Research Advisory TRA-2026-45 published
2026-05-27: disclosed: CVE-2026-8364 published to NVD

References

https://www.tenable.com/security/research/TRA-2026-45

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.