Vulnerabilities

Filters

1 selected

27 records

Sort

Vendor: Termix-SSH Clear all filters

TI-2026-83673 CVE-2026-120322 · GHSA-49pf-hq35-qwjq

Path traversal in Termix-SSH Termix file transfer

HIGH 76

A vulnerability was identified in Termix-SSH Termix up to 2.9.2.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00618 Published 2026-11-02 No fix listed CWE-22

TI-2026-55241 CVE-2026-79763

Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

LOW 24

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-09-24 Fixed in 2.5.1 CWE-308

TI-2026-55242 CVE-2026-79764

Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

HIGH 67

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.0042 Published 2026-09-24 Fixed in 2.5.1 CWE-918

TI-2026-55240 CVE-2026-79762

Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials…

MEDIUM 58

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.0012 Published 2026-09-24 Fixed in 2.5.1 CWE-321

TI-2026-55243 CVE-2026-79766

Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

HIGH 74

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00482 Published 2026-09-24 Fixed in 2.5.1 CWE-78

TI-2026-55237 CVE-2026-79759

Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint

MEDIUM 53

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00379 Published 2026-09-24 Fixed in 2.5.1 CWE-639

TI-2026-55239 CVE-2026-79761

Termix: Command injection in SSH key deployment verification

LOW 29

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1MEDIUM 6.6 Network High privileges No interaction EPSS 0.00359 Published 2026-09-24 Fixed in 2.5.1 CWE-78

TI-2026-55236 CVE-2026-79758

Termix: Authenticated users can read other users' host status and clear global SSH connections

MEDIUM 58

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00435 Published 2026-09-24 Fixed in 2.5.1 CWE-284

TI-2026-55238 CVE-2026-79760

Termix: Authenticated blind SSRF through notification channel test endpoints

LOW 28

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00303 Published 2026-09-24 Fixed in 2.5.1 CWE-918

TI-2026-38616 CVE-2026-53545

Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection

MEDIUM 50

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00726 Published 2026-08-19 Fixed in 2.3.2 CWE-78

TI-2026-38617 CVE-2026-53546

Termix: Missing authorization in SSH host credential resolution exposes stored credentials

HIGH 76

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00464 Published 2026-08-19 Fixed in 2.3.2 CWE-639

TI-2026-38615 CVE-2026-53542

Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts

HIGH 73

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00661 Published 2026-08-19 Fixed in 2.3.2 CWE-78

TI-2026-38619 CVE-2026-53548

Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users

HIGH 76

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.6 Network Low privileges No interaction EPSS 0.00464 Published 2026-08-19 Fixed in 2.3.2 CWE-285

TI-2026-38618 CVE-2026-53547

Termix: Account Takeover via Global Settings Disclosure

HIGH 73

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00541 Published 2026-08-19 Fixed in 2.3.2 CWE-862

TI-2026-38620 CVE-2026-53549

Termix: Server-Side Request Forgery via Proxy Connectivity Test

HIGH 67

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00451 Published 2026-08-19 Fixed in 2.3.2 CWE-918

TI-2026-33487 CVE-2026-45750

Termix Vulnerable to Arbitrary Command Execution in File Manager

HIGH 74

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00294 Published 2026-06-05 Fixed in 2.3.2 CWE-639

TI-2026-33486 CVE-2026-45749

Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password

HIGH 70

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00324 Published 2026-06-05 Fixed in 2.3.2 CWE-308

TI-2026-33485 CVE-2026-45748

Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection

HIGH 82

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01729 Published 2026-06-05 Fixed in 2.3.2 CWE-78

TI-2026-33483 CVE-2026-45746

Termix Vulnerable to Arbitrary Command Execution via Session Hijacking

HIGH 74

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.0 Network Low privileges User interaction EPSS 0.00387 Published 2026-06-05 Fixed in 2.3.2 CWE-284

TI-2026-33481 CVE-2026-45744

Termix has an OS Command Injection in File Manager resolvePath endpoint

HIGH 76

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.02008 Published 2026-06-05 Fixed in 2.3.2 CWE-78

TI-2026-33480 CVE-2026-45743

Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)

HIGH 70

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00282 Published 2026-06-05 Fixed in 2.3.2 CWE-639

TI-2026-33482 CVE-2026-45745

Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft

HIGH 70

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 8.0 Network No auth User interaction EPSS 0.00168 Published 2026-06-05 No fix listed CWE-295

TI-2026-30743 CVE-2026-42454

Termix: OS Command Injection in Docker Container Management Endpoints

MEDIUM 44

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00652 Published 2026-05-08 Fixed in 2.1.0 CWE-78

TI-2026-30742 CVE-2026-42453

Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass

HIGH 71

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 4.0HIGH 8.7 Network No auth No interaction EPSS 0.01207 Published 2026-05-08 Fixed in 2.1.0 CWE-77

TI-2026-30741 CVE-2026-42452

Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP

HIGH 70

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00306 Published 2026-05-08 Fixed in 2.1.0 CWE-304