CVE-2026-108070
Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.
| CWE | CWE-552 |
| Vendor | tsplus |
| Product | tsplus remote access |
| Published | Oct 14, 2026 |
Stay Ahead of the Next One
Get instant alerts for tsplus tsplus remote access
Be the first to know when new unknown vulnerabilities affecting tsplus tsplus remote access are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
TSplus / TSplus Remote Access
19.20.3.10
References
Credits
Javier Medina Munuera