TS
Vendor
TSplus
10
CVEs
0
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-108072 | TR TSplus Remote Access TSplus | 5.4 | Oct 14 | Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation |
| CVE-2026-108071 | TR TSplus Remote Access TSplus | 8.7 | Oct 14 | Improper Multi-Factor Authentication Validation Allows Authentication Bypass |
| CVE-2026-108070 | TR TSplus Remote Access TSplus | 8.7 | Oct 14 | Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access |
| CVE-2025-5922 | TR TSplus Remote Access TSplus | 4.8 | Jul 29 | Retrievable password hash protecting TSplus admin console |
| CVE-2025-26318 | TR TSplus Remote Access TSplus | 5.8 | Mar 4 | hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application |
| CVE-2023-27133 | TR Tsplus Remote Work Tsplus | 9.8 | Oct 17 | TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder |
| CVE-2023-27132 | TR Tsplus Remote Work Tsplus | 9.8 | Oct 17 | TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal |
| CVE-2023-31067 | TR Tsplus Remote Access Tsplus | 9.8 | Sep 11 | An issue was discovered in TSplus Remote Access through 16.0.2.14 |
| CVE-2023-31069 | TR Tsplus Remote Work Tsplus | 9.8 | Sep 11 | An issue was discovered in TSplus Remote Access through 16.0.2.14 |
| CVE-2023-31068 | TR Tsplus Remote Work Tsplus | 9.8 | Sep 11 | An issue was discovered in TSplus Remote Access through 16.0.2.14 |