Product by Termix-SSH
Termix
25 known vulnerabilities in Termix (Termix-SSH), 0 of them actively exploited (CISA KEV).
Key figures
25
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
9
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-45744 | Termix has an OS Command Injection in File Manager resolvePath endpoint | 9.9 | |
| Critical | CVE-2026-45748 | Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection | 9.8 | |
| High | CVE-2026-42453 | Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass | — | |
| Critical | CVE-2026-53545 | Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection | 9.8 | |
| High | CVE-2026-53542 | Termix: OS Command Injection | 8.8 | |
| Critical | CVE-2026-79766 | Termix: OS Command Injection | 9.1 | |
| Critical | CVE-2026-42454 | Termix: OS Command Injection in Docker Container Management Endpoints | 9.9 | |
| Critical | CVE-2026-53546 | Termix: Missing authorization in SSH host credential resolution exposes stored credentials | 9.6 | |
| Critical | CVE-2026-53548 | Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users | 9.6 | |
| High | CVE-2026-53547 | Termix: Account Takeover via Global Settings Disclosure | 8.8 | |
| High | CVE-2026-79764 | Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist | 7.7 | |
| High | CVE-2026-53549 | Termix: Server-Side Request Forgery via Proxy Connectivity Test | 7.7 | |
| Critical | CVE-2026-45746 | Termix Vulnerable to Arbitrary Command Execution via Session Hijacking | 9.0 | |
| Medium | CVE-2026-79761 | Termix: Command injection in SSH key deployment verification | 6.6 | |
| Medium | CVE-2026-79758 | Termix: Authenticated users can read other users' host status and clear global SSH connections | 5.4 | |
| Critical | CVE-2026-45750 | Termix Vulnerable to Arbitrary Command Execution in File Manager | 9.0 | |
| Medium | CVE-2026-79760 | Termix: Authenticated blind SSRF through notification channel test endpoints | 6.4 | |
| High | CVE-2026-45749 | Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password | 8.1 | |
| High | CVE-2026-45743 | Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR) | 8.1 | |
| High | CVE-2026-42452 | Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP | 8.1 | |
| Medium | CVE-2026-79763 | Termix: Use of Single-factor Authentication | 5.3 | |
| High | CVE-2026-45745 | Termix: Improper Certificate Validation | 8.0 | |
| Medium | CVE-2026-79759 | Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint | 4.3 | |
| Medium | CVE-2026-79762 | Termix: Use of Hard-coded Cryptographic Key | 5.5 | |
| High | CVE-2026-22804 | Termix: Cross-site Scripting | 8.0 |
News
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 33sans-atrisk-mail,
- @RISK®: The Consensus Security Vulnerability Alert: Vol. 26, Num. 23sans-atrisk-mail,