CVE-2026-108070
— UNSCOREDPublished 2026-10-14 · Updated 2026-10-15
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal resources.
Weaknesses
CWE-552
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- MEDIUMCVE-2026-100727
- HIGHCVE-2026-102695PoC
- MEDIUMCVE-2026-105750PoC
- MEDIUMCVE-2026-108938PoC
- UNSCOREDCVE-2026-109162PoC
- MEDIUMCVE-2026-15915
- UNSCOREDCVE-2026-21589PoC
- MEDIUMCVE-2026-58415
Related by shared AI tags and CWE weakness class. Browse the full archive.