Termix-SSH vulnerabilities

Newest CVEs

• CVE-2026-120322

  Termix-SSH Termix transferToHost path traversal

  Termix-SSH · Termix

  Critical9.4
• CVE-2026-79763

  Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)

  Termix-SSH · Termix

  Medium5.3
• CVE-2026-79764

  Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist

  Termix-SSH · Termix

  High7.7
• CVE-2026-79762

  Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy

  Termix-SSH · Termix

  Medium5.5
• CVE-2026-79766

  Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email

  Termix-SSH · Termix

  Critical9.1
• CVE-2026-79759

  Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint

  Termix-SSH · Termix

  Medium4.3
• CVE-2026-79761

  Termix: Command injection in SSH key deployment verification

  Termix-SSH · Termix

  Medium6.6
• CVE-2026-79758

  Termix: Authenticated users can read other users' host status and clear global SSH connections

  Termix-SSH · Termix

  Medium5.4
• CVE-2026-79760

  Termix: Authenticated blind SSRF through notification channel test endpoints

  Termix-SSH · Termix

  Medium6.4
• CVE-2026-53545

  Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection

  Termix-SSH · Termix

  Critical9.8