Termix

Termix

10 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9

CVE-2026-45750

Exploit
  • EPSS 0.29%
  • Veröffentlicht 05.06.2026 18:06:04
  • Zuletzt bearbeitet 08.06.2026 17:16:44

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in the Termix File Manager component unsafely processes the path ...

8.1

CVE-2026-45749

Exploit
  • EPSS 0.32%
  • Veröffentlicht 05.06.2026 18:05:11
  • Zuletzt bearbeitet 08.06.2026 14:59:48

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /users/totp/disable` and `POST /users/totp/backup-codes` endpoints in Termix prior to version 2.3.2 accept the account password as...

9.8

CVE-2026-45748

Exploit
  • EPSS 1.73%
  • Veröffentlicht 05.06.2026 18:00:26
  • Zuletzt bearbeitet 08.06.2026 17:16:44

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host ...

9

CVE-2026-45746

Exploit
  • EPSS 0.39%
  • Veröffentlicht 05.06.2026 17:59:23
  • Zuletzt bearbeitet 09.06.2026 16:16:41

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper val...

9.9

CVE-2026-45744

Exploit
  • EPSS 2.01%
  • Veröffentlicht 05.06.2026 17:58:05
  • Zuletzt bearbeitet 08.06.2026 20:17:01

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint use...

8.1

CVE-2026-45743

Exploit
  • EPSS 0.28%
  • Veröffentlicht 05.06.2026 17:56:53
  • Zuletzt bearbeitet 08.06.2026 17:16:44

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by `sessio...

8

CVE-2026-45745

Exploit
  • EPSS 0.17%
  • Veröffentlicht 05.06.2026 17:53:54
  • Zuletzt bearbeitet 08.06.2026 15:02:28

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Desktop (Electron) disables TLS certificate validation, allowing a machine-in-the-middle attacker to inter...

9.9

CVE-2026-42454

  • EPSS 0.65%
  • Veröffentlicht 08.05.2026 22:56:17
  • Zuletzt bearbeitet 12.05.2026 16:40:53

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, all Docker container management endpoints in Termix interpolate the containerId URL path parameter and WebSocket mes...

4.7

CVE-2026-22804

Exploit
  • EPSS 0.17%
  • Veröffentlicht 12.01.2026 22:14:03
  • Zuletzt bearbeitet 16.01.2026 18:37:32

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.7.0 to 1.9.0, Stored Cross-Site Scripting (XSS) vulnerability exists in the Termix File Manager component. The application fails to s...

9.1

CVE-2025-59951

Exploit
  • EPSS 4.71%
  • Veröffentlicht 01.10.2025 22:15:31
  • Zuletzt bearbeitet 20.10.2025 18:37:31

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The official Docker image for Termix versions 1.5.0 and below, due to being configured with an Nginx reverse proxy, causes the backend to r...