CVE-2025-26318
Quick assessment
Affected
TSplus TSplus Remote Access
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TSplus Remote Access是TSplus公司的一款用于远程桌面访问和 Windows 应用交付的软件。用于实现远程桌面和 Web 访问，可增强远程打印。 TSplus Remote Access 17.30版本存在安全漏洞，该漏洞源于权限不当，导致信息泄露。
Possible ATT&CK Techniques 1 AI
T1078 · Valid Accounts
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-26318
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
hb.exe in TSplus Remote Access before 17.30 2024-10-30 allows remote attackers to retrieve a list of all domain accounts currently connected to the application.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
通过发送数据的信息暴露
Source: CVE Program / CVE List V5
Vulnerability Title
TSplus Remote Access 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TSplus Remote Access是TSplus公司的一款用于远程桌面访问和 Windows 应用交付的软件。用于实现远程桌面和 Web 访问，可增强远程打印。 TSplus Remote Access 17.30版本存在安全漏洞，该漏洞源于权限不当，导致信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TSplus | TSplus Remote Access | 0 ~ 17.30 | - |
|
II. Public POCs for CVE-2025-26318
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | POC CVE-2025-26318 | https://github.com/Frozenka/CVE-2025-26318 | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-26318
请登录查看更多情报信息。
Proof of Concept for CVE-2025-26318 (1)
IV. Related Vulnerabilities
Same product: TSplus Remote Access
-
CVE-2026-108072
Insecure Permissions on Shared Startup Scripts Allow Cross-U -
CVE-2026-108071
Improper Multi-Factor Authentication Validation Allows Authe -
CVE-2026-108070
Improper Access Control Allows Unauthorized Access to Protec -
CVE-2025-5922
Retrievable password hash protecting TSplus admin console
Same vendor: TSplus
-
CVE-2026-108072
Insecure Permissions on Shared Startup Scripts Allow Cross-U -
CVE-2026-108071
Improper Multi-Factor Authentication Validation Allows Authe -
CVE-2026-108070
Improper Access Control Allows Unauthorized Access to Protec -
CVE-2025-5922
Retrievable password hash protecting TSplus admin console
Same weakness: CWE-201
-
CVE-2026-109695
WordPress FluentCart plugin <= 1.7.1 - Sensitive Data Exposu -
CVE-2026-75559
Vehicle Inspection Certificate Viewer 泄露敏感信息 -
CVE-2026-66822
.NET Information Disclosure Vulnerability -
CVE-2026-89203
RUGGEDCOM CROSSBOW <V6.0 信息泄露漏洞 -
CVE-2026-108489
WordPress Active Products Tables for WooCommerce plugin <= 2
V. Comments for CVE-2025-26318
No comments yet