CVE-2026-8359CWE-476

Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS

High · published May 27, 2026

CVSS v3.1
7.5
EPSS
0%
Percentile
38.9
In the wild
Unconfirmed
What it is

When processing a request with a URL path starting with /status or /sysinfo, WOSHttpStatusModule.dll is to be loaded to handle such URL patterns. The WOSBin_LoadHttpModule function in the dll would be called to set up a "module" object for that module. However, WOSHttpStatusModule.dll is not present in the installation. As a result, a function pointer to WOSBin_LoadHttpModule (which would have been in the export table in WOSHttpStatusModule.dll) is set to NULL, resulting in calling a function at address 0.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00460 · 38.9th percentile
Weakness
CWE-476 · NULL Pointer Dereference
Published
2026-05-27T19:49Z
EPSS history
Timeline
  • 27 MAY 19:49Z
    Gladinet Triofox WOSHttpStatusModule.dll NULL Function Pointer Call DoS
    cvelistv5