Improper Access Control in TSplus Remote Access Web Server by TSplus

CVE-2026-108070

What is CVE-2026-108070?

A security flaw in the TSplus Remote Access web server enables unauthenticated remote attackers to exploit improper access controls. By manipulating paths through the /socket.io/JWN/ endpoint, these attackers can bypass intended access restrictions and gain unauthorized access to sensitive internal resources. This vulnerability raises significant security concerns, particularly for businesses relying on TSplus for remote access solutions.

References