CVE-2020-13872: Royalapps Royal Ts

High severity, CVSS 8.8. EPSS: 2.7% chance of exploitation in the next 30 days.

Royal TS before 5 has a 0.0.0.0 listener, which makes it easier for attackers to bypass tunnel authentication via a brute-force approach.

Affected products

• Royalapps Royal Ts: before 5.0 (fixed in 5.0)

Published 2020-06-09. Last modified 2026-06-17.