CVE-2026-108071

CVE-2026-108071 · Improper Multi-Factor Authentication Validation Allows Authentication Bypass

Esta página presenta datos de fuentes públicas de vulnerabilidades. Consulta el aviso original antes de actualizar.

Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation result, allowing the attacker to complete the login without a valid second-factor token and gain access to protected applications and resources.

CVSS 8.7 · Alta · EPSS 0,5%

Publicación

2026-10-14T11:02:57.605Z

Actualización

2026-10-14T16:04:32.299Z

Comprueba tu servidor →