CVE-2026-108072: TSplus Remote Access 19.20.3.10

Affected technology

TSplus Remote Access · 19.20.3.10
TSplus

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 4.0): Local · Low privileges required · Passive user interaction

What an attacker can do

A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Vendor/CNA’s CVSS 4.0 assessment (base score 5.4/10) rates confidentiality, integrity and availability impact as high.