Termix-SSH Termix

• CVE-2026-120322 Critical 9.9 Termix-SSH Termix transferToHost path traversal 0.6%
• CVE-2026-79763 Medium 5.3 Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749) 0.3%
• CVE-2026-79764 High 7.7 Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist 0.4%
• CVE-2026-79762 Medium 5.5 Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy 0.1%
• CVE-2026-79766 Critical 9.1 Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email 0.5%
• CVE-2026-79759 Medium 4.3 Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint 0.4%
• CVE-2026-79761 Medium 6.6 Termix: Command injection in SSH key deployment verification 0.4%
• CVE-2026-79758 Medium 5.4 Termix: Authenticated users can read other users' host status and clear global SSH connections 0.4%
• CVE-2026-79760 Medium 6.4 Termix: Authenticated blind SSRF through notification channel test endpoints 0.3%
• CVE-2026-53545 Critical 9.8 Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection 0.7%
• CVE-2026-53546 Critical 9.6 Termix: Missing authorization in SSH host credential resolution exposes stored credentials 0.5%
• CVE-2026-53542 High 8.8 Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts 0.7%
• CVE-2026-53548 Critical 9.6 Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users 0.5%
• CVE-2026-53547 High 8.8 Termix: Account Takeover via Global Settings Disclosure 0.5%
• CVE-2026-53549 High 7.7 Termix: Server-Side Request Forgery via Proxy Connectivity Test 0.5%
• CVE-2026-45750 Critical 9.0 Termix Vulnerable to Arbitrary Command Execution in File Manager 0.3%
• CVE-2026-45749 High 8.1 Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password 0.3%
• CVE-2026-45748 Critical 9.8 Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection 1.7%
• CVE-2026-45746 Critical 9.0 Termix Vulnerable to Arbitrary Command Execution via Session Hijacking 0.4%
• CVE-2026-45744 Critical 9.9 Termix has an OS Command Injection in File Manager resolvePath endpoint 2.0%
• CVE-2026-45743 High 8.1 Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR) 0.3%
• CVE-2026-45745 High 8.0 Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft 0.2%
• CVE-2026-42454 Critical 9.9 Termix: OS Command Injection in Docker Container Management Endpoints 0.7%
• CVE-2026-42453 High 8.7 Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass 1.2%
• CVE-2026-42452 High 8.1 Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP 0.3%
• CVE-2026-22804 High 8.0 Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser 0.2%