Vulnerabilities

TI-2026-73983 CVE-2026-108072 · GHSA-23j4-jjc8-vpm7

Weak permissions in TSplus Remote Access let users run code as others

LOW 25

Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts.

CVSS 4.0MEDIUM 5.4 Local Low privileges User interaction EPSS 0.00128 Published 2026-10-14 No fix listed CWE-276

TI-2026-73982 CVE-2026-108071 · GHSA-4468-w24c-wmgj

Improper MFA validation in TSplus Remote Access allows login bypass

MEDIUM 40

Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00469 Published 2026-10-14 No fix listed CWE-304

TI-2026-73981 CVE-2026-108070 · GHSA-2xg6-fqm4-hc55

TSplus Remote Access web server exposes protected internal resources

MEDIUM 44

A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/J…

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.00449 Published 2026-10-14 No fix listed CWE-552

TI-2025-05348 CVE-2025-5922 · GHSA-xfj9-9qw7-7cmr

Retrievable password hash protecting TSplus admin console

LOW 21

Access to TSplus Remote Access Admin Tool is restricted to administrators (unless "Disable UAC" option is enabled) and requires a PIN code.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00097 Published 2025-07-29 Fixed in v18.40.6.17, v17.2025.6.27 +1 CWE-522

TI-2025-19291 CVE-2025-26318 · GHSA-jxrw-5fgg-2485

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to…

HIGH 65

hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application.

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00954 Published 2025-03-04 Fixed in 17.30 CWE-201

TI-2023-11941 CVE-2023-27133 · GHSA-m4g4-hvch-vhgf

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the…

HIGH 82

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00926 Published 2023-10-17 No fix listed CWE-276

TI-2023-11940 CVE-2023-27132 · GHSA-8c9g-7c4g-j7x7

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the…

HIGH 82

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0106 Published 2023-10-17 No fix listed CWE-522

TI-2023-14796 CVE-2023-31069 · GHSA-xcff-9rfc-c4h6

An issue was discovered in TSplus Remote Access through 16.0.2.14.

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03686 Published 2023-09-11 No fix listed CWE-312

TI-2023-14795 CVE-2023-31068 · GHSA-gx37-4cw7-q8m8

An issue was discovered in TSplus Remote Access through 16.0.2.14.

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05421 Published 2023-09-11 No fix listed CWE-276

TI-2023-14794 CVE-2023-31067 · GHSA-7r8v-7v58-4r7m

An issue was discovered in TSplus Remote Access through 16.0.2.14.

HIGH 82

An issue was discovered in TSplus Remote Access through 16.0.2.14.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.05488 Published 2023-09-11 No fix listed CWE-276

Vulnerabilities

Filters