CVE-2026-8364
Last modified
CVE-2026-8364 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.. EPSS estimates a 0.30% chance of exploitation in the next 30 days.
Description
Gladinet Triofox Cloud Server Agent Access Service (GladServerAgentService.exe) listens on TCP port 7878 and processes remote HTTP messages with URL paths starting with /resources, /status, /sysinfo, /woshome, /Settings, /schedule, or /DavCache.
Metrics
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-8364?
How severe is CVE-2026-8364?
How do I fix CVE-2026-8364?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8362A stack-based buffer overflow condition exists in WOSDefault…9.8
- CVE-2026-83621ntopng is a web-based network traffic monitoring application…8.1
- CVE-2026-83625The Contact Form by Supsystic plugin for WordPress is vulner…7.2
- CVE-2026-83627The Hummingbird – Speed Optimization, Caching, Minify, Compr…9.8
- CVE-2026-83628The Theme My Login plugin for WordPress is vulnerable to Mis…4.3
- CVE-2026-8363A stack-based buffer overflow condition exists in WOSDeviceD…9.8
- CVE-2026-8365The Blocksy theme for WordPress is vulnerable to PHP Object …8.8
- CVE-2026-83660Adobe Campaign Classic (ACC) is affected by a Server-Side Re…10
- CVE-2026-8367aria2c accepts a server certificate with incorrect Extended …5.3
- CVE-2026-8368LWP::UserAgent versions before 6.83 for Perl leak Authorizat…6.5
- CVE-2026-8369Improper Input Validation in the NAT64 translator in The Ope…6
- CVE-2026-8370Execution with unnecessary privileges vulnerability in Broad…8.5
Are you affected by CVE-2026-8364?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST