CVE-2026-108070

A vulnerability involving improper access control in the TSplus Remote Access web server that…

Risk score: 65/100
CVSS: 8.7 v4.0
Exploit chance (30 days): 0.4%
Published: 14 Oct 2026

Open in the live forecast Today's forecast

What to know

What it is: A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.
Affected: See advisory
Fix: Apply the vendor's security update; see the linked advisory.
Exploitation: No known exploitation

Why it is Amber

CVSS 8.7 high
Remotely exploitable without logging in

References

https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-tsplus-remote-access

Original description

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.

Last activity 14 Oct 2026. Patch Forecast updates every hour.