TSplus vulnerabilities
We track 6 vulnerabilities in TSplus products across 2 products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on October 14, 2026.
Latest TSplus vulnerabilities
- 8.7 High severity
TSplus Remote Access: Missing Critical Step in Authentication
Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication (MFA) mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does
- 8.7 High severity
TSplus Remote Access: Files or Directories Accessible to External Parties
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restr
- 9.8 Critical severity
Tsplus Remote Work: Incorrect Default Permissions
TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILES(X86)%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-202
- 9.8 Critical severity
Tsplus Remote Work: Insufficiently Protected Credentials
TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product.
- 9.8 Critical severity
Tsplus Remote Work: Incorrect Default Permissions
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\UserDesktop\themes.
- 9.8 Critical severity
Tsplus Remote Access: Incorrect Default Permissions
An issue was discovered in TSplus Remote Access through 16.0.2.14. There are Full Control permissions for Everyone on some directories under %PROGRAMFILES(X86)%\TSplus\Clients\www.