36750 matches found
CVE-2026-108071
The TSplus Remote Access software contains an incorrect authentication vulnerability within its multi-factor authentication (MFA) mechanism. A remote attacker who possesses valid first-factor credentials can bypass the second-factor verification because the authentication flow fails to correctly ...
CVE-2026-108071 Improper Multi-Factor Authentication Validation Allows Authentication Bypass
Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication MFA mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation...
CVE-2026-108071 Improper Multi-Factor Authentication Validation Allows Authentication Bypass
Incorrect authentication vulnerability in the TSplus Remote Access multi-factor authentication MFA mechanism. A remote attacker authenticated with valid first-factor credentials could bypass the second-factor verification because the authentication flow does not correctly apply the MFA validation...
CVE-2026-108070
The TSplus Remote Access web server is vulnerable to an improper access control flaw. This vulnerability allows an unauthenticated remote attacker to bypass intended access restrictions and reach protected internal resources by using manipulated paths via the /socket.io/JWN/ endpoint. Exploitatio...
CVE-2026-108070 Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal...
CVE-2026-108070 Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in TSplus Remote Access
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal...
EUVD-2026-100980
A vulnerability involving improper access control in the TSplus Remote Access web server that allows an unauthenticated remote attacker to access internal resources protected by manipulated paths through the /socket.io/JWN/ endpoint, bypassing the access restrictions intended for certain internal...
PT-2026-113924
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS on the SRX Series affected versions not specified Description A stack-based buffer overflow occurs in the iked IKE key-management daemon. This issue allows an authenticated remote-access VPN client to execute arbitrar...
CVE-2026-76113: Insertion of Sensitive Information into Log File
Dell Terraform Provider for Redfish, versions 1.1.0 through 1.6.1, contains an Exposure of Sensitive Information to an Unauthorized Actor vulnerability in the redfishcertificate resource component. A high privileged attacker with remote access could potentially exploit this vulnerability, leading...
Linux Distros Unpatched Vulnerability : CVE-2026-78356
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The OTRS Agent Frontend configuration endpoint can be accessed without authentication. This allows unauthenticated remote users to retrieve internal application...
Variations Component Access Information Disclosure
The vulnerability of the Variations component in Google Chrome and Microsoft Edge is related to insufficient checking of the input protected information. Exploiting this vulnerability can allow a malicious actor to gain access to protected information remotely...
Sync Component Protected Information Access
The vulnerability of the Sync component in Google Chrome and Microsoft Edge is related to insufficient validation of the input protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...
DeviceBoundSessionCredentials Component Access Information Disclosure
The vulnerability of the DeviceBoundSessionCredentials component in Google Chrome and Microsoft Edge is related to insufficient validation of the entered protected information. Exploiting this vulnerability can allow an attacker to gain access to protected information remotely...
CVE-2026-96316
Improper access control in Windows Routing and Remote Access Service RRAS allows an authorized attacker to perform tampering locally...
CVE-2026-96245
Out-of-bounds read in Windows Routing and Remote Access Service RRAS allows an unauthorized attacker to disclose information over a network...
CVE-2026-87698
Out-of-bounds read in Windows Remote Access Service Infrastructure allows an authorized attacker to disclose information locally...
CVE-2026-85867
Heap-based buffer overflow in Windows Remote Access Connection Manager allows an authorized attacker to elevate privileges locally...
CVE-2026-85809
Remote Code Execution in Windows Routing and Remote Access Service RRAS allows attacker to gain an unauthorized access to victim's machine...