CVE-2026-108070
HighCVSS 8.7Summary
A vulnerability in the TSplus Remote Access web server involves improper access control. An unauthenticated remote attacker can access internal resources by manipulating paths through the /socket.io/JWN/ endpoint, bypassing access restrictions.
Risk Assessment
The risk includes unauthorized access to sensitive internal resources, potentially leading to data confidentiality and system integrity breaches.
Recommendation
Immediately apply vendor-provided patches and strengthen access control mechanisms on the web server.
Other vulnerabilities in TSplus Remote Access
See all- CVE-2026-108072Medium
Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode.
- CVE-2026-108071High
Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation result, allowing the attacker to complete the login without a valid second-factor token and gain access to protected applications and resources.
Original NVD description (English source)
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS