CVE-2026-108070

CVE-2026-108070 · Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access

Cette page présente des faits issus de sources publiques. Consultez l’avis original avant toute mise à jour.

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.

CVSS 8.7 · Élevée · EPSS 0,4%

Publication

2026-10-14T10:54:58.334Z

Mise à jour

2026-10-14T16:03:57.863Z

Vérifiez votre serveur →