CVE-2026-108072— Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation
Quick assessment
Affected
TSplus TSplus Remote Access
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the
Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| TSplus | TSplus Remote Access | 19.20.3.10 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-108072
Vulnerability Information
Shenlong is analyzing...
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Insecure Permissions on Shared Startup Scripts Allow Cross-User Code Execution and Potential Privilege Escalation
Source: CVE Program / CVE List V5
Vulnerability Description
Vulnerability due to incorrect permissions in TSplus Remote Access shared login scripts. The autostart1.tscr files, located in the shared themes directory, allow users without sufficient privileges to write to them. A local attacker with a valid session on the terminal or remote desktop server could modify these files to execute arbitrary commands within another user’s security context when that user logs in using the same theme or operating mode. Depending on the affected user’s privileges, exploitation could allow lateral movement between users or privilege escalation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Source: CVE Program / CVE List V5
Vulnerability Type
缺省权限不正确
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| TSplus | TSplus Remote Access | 19.20.3.10 | - |
|
II. Public POCs for CVE-2026-108072
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-108072
请登录查看更多情报信息。
Other References for CVE-2026-108072 (1)
Same Patch Batch · TSplus · 2026-10-14 · 3 CVEs total
| CVE-2026-108070 | 8.7 HIGH | Improper Access Control Allows Unauthorized Access to Protected Internal Web Resources in |
| CVE-2026-108071 | 8.7 HIGH | Improper Multi-Factor Authentication Validation Allows Authentication Bypass |
IV. Related Vulnerabilities
Same product: TSplus Remote Access
Same weakness: CWE-276
-
CVE-2026-110359
Hyland Desktop Host 本地提权漏洞 -
CVE-2026-105009
Windows Server Update Service Elevation of Privilege Vulnera -
CVE-2026-108503
Unauthorized information acquisition vulnerability in ZTE Z8 -
CVE-2026-107332
Insecure Default File Permissions on Cached Credentials in A -
CVE-2026-107573
Incorrect Default Permissions in hMailServer
V. Comments for CVE-2026-108072
No comments yet