CVE-2026-8362: Gladinet Triofox Stack-based Buffer Overflow in WOSDefaultHttpModule.dll
A stack-based buffer overflow condition exists in WOSDefaultHttpModule.dll when processing a long URL path starting with /woshome
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
WOSDefaultHttpModule.dll (Gladinet Triofox)from your environment.If the functionality provided by WOSDefaultHttpModule.dll is not required, disable or uninstall the module from the web server (for example, remove or disable the module in IIS) to eliminate the vulnerable component.
- Configuration
Configure the web server or web application firewall to reject HTTP requests where the URL path begins with "/woshome" and the path length exceeds a normal/expected length. Implement request-length limits and URL filtering rules to drop or block long "/woshome" paths.
WOSDefaultHttpModule.dll / web server request filtering URL path length handling for /woshome = reject overly long paths starting with /woshome - Compensating control
Deploy a web application firewall, reverse proxy, or network firewall rules to block or restrict external access to URLs beginning with "/woshome" (for example, restrict access to trusted IPs or block requests matching long "/woshome" paths).
Event History
Frequently Asked Questions
What is the severity of CVE-2026-8362?
The severity of CVE-2026-8362 is critical with a score of 9.8.
What type of vulnerability is CVE-2026-8362?
CVE-2026-8362 is a stack-based buffer overflow vulnerability.
What software is affected by CVE-2026-8362?
CVE-2026-8362 affects Gladinet Triofox.
How do I fix CVE-2026-8362?
To fix CVE-2026-8362, apply the latest security patch provided by Gladinet for Triofox.
What are the potential impacts of CVE-2026-8362?
CVE-2026-8362 can lead to denial of service, code execution, or data corruption.