Termix-ssh vulnerabilities
26 CVEs and advisories name Termix-ssh as an affected vendor, newest first. Follow it as a feed.
- CVE-2026-120322Termix-SSH Termix transferToHost path traversal
- CVE-2026-79763Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)
- CVE-2026-79764Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
- CVE-2026-79762Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy
- CVE-2026-79766Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
- CVE-2026-79759Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint
- CVE-2026-79761Termix: Command injection in SSH key deployment verification
- CVE-2026-79758Termix: Authenticated users can read other users' host status and clear global SSH connections
- CVE-2026-79760Termix: Authenticated blind SSRF through notification channel test endpoints
- CVE-2026-53545Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
- CVE-2026-53546Termix: Missing authorization in SSH host credential resolution exposes stored credentials
- CVE-2026-53542Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts
- CVE-2026-53548Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users
- CVE-2026-53547Termix: Account Takeover via Global Settings Disclosure
- CVE-2026-53549Termix: Server-Side Request Forgery via Proxy Connectivity Test
- CVE-2026-45750Termix Vulnerable to Arbitrary Command Execution in File Manager
- CVE-2026-45749Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password
- CVE-2026-45748Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection
- CVE-2026-45746Termix Vulnerable to Arbitrary Command Execution via Session Hijacking
- CVE-2026-45744Termix has an OS Command Injection in File Manager resolvePath endpoint
- CVE-2026-45743Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)
- CVE-2026-45745Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft
- CVE-2026-42454Termix: OS Command Injection in Docker Container Management Endpoints
- CVE-2026-42453Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass
- CVE-2026-42452Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP
- CVE-2026-22804Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser