CVE-2026-108070

CVE-2026-108070 · Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.

CVSS 8.7 · Alta · EPSS 0,4%

Publicación

2026-10-14T10:54:58.334Z

Actualización

2026-10-14T16:03:57.863Z

Comprueba tu servidor →