CVE-2026-108070

CVE-2026-108070 · Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access

This page contains facts from public vulnerability sources. Check the original advisory before updating.

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.

CVSS 8.7 · High · EPSS 0.4%

Published

2026-10-14T10:54:58.334Z

Updated

2026-10-14T16:03:57.863Z

Check your server →