CVE-2026-108070

Deferred Deferred - Pending Action

Improper Access Control in TSplus Remote Access Web Server

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: Spanish National Cybersecurity Institute, S.A. (INCIBE)

Description

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2026-108070

EUVD

EUVD-2026-100980

Affected Vendors & Products

Vendor	Product	Version / Range
TSplus	TSplus	Remote Access 19.20.3.10

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-552	The product makes files or directories accessible to unauthorized actors, even though they should not be.

Attack-Flow Graph

Executive Summary

CVE-2026-108070 is a high-severity improper access control vulnerability in TSplus Remote Access version 19.20.3.10. It allows unauthenticated remote attackers to bypass intended access restrictions by manipulating paths through the /socket.io/JWN/ endpoint, gaining unauthorized access to internal resources.

Detection Guidance

Check for unauthorized access attempts to the /socket.io/JWN/ endpoint by reviewing web server logs for suspicious path manipulations or requests to internal resources. Use network monitoring tools to detect unusual traffic patterns targeting TSplus Remote Access.

Impact Analysis

An attacker could exploit this to access sensitive internal resources without authentication, potentially leading to data breaches, unauthorized system access, or further network compromise. The high CVSS score (8.7) indicates significant risk.

Compliance Impact

This vulnerability could lead to unauthorized access to protected data, violating confidentiality requirements in GDPR and HIPAA. Organizations using affected TSplus versions may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Update TSplus Remote Access to the latest version to address the vulnerability. If an update is not immediately available, restrict access to the /socket.io/JWN/ endpoint via firewall rules or web server configuration to prevent unauthorized access.

Hi! I’m here to help you understand CVE-2026-108070. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70