Advisories · Technology
Termix.
Every CVE that names Termix among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
Termix-SSH Termix transferToHost path traversal
- Termix
- Path traversal
- CVSS 5.3 Medium
Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)
- Termix
- CWE-308
- CVSS 7.7 High
Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
- Termix
- Server-side request forgery (SSRF)
- CVSS 5.5 Medium
Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy
- Termix
- Hard-coded credentials
- CVSS 9.1 CriticalCritical · CVSS 9+
Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
- Termix
- Command injection
- CVSS 4.3 Medium
Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint
- Termix
- Broken access control
- CVSS 6.6 Medium
Termix: Command injection in SSH key deployment verification
- Termix
- Command injection
- CVSS 5.4 Medium
Termix: Authenticated users can read other users' host status and clear global SSH connections
- Termix
- Broken access control
- CVSS 6.4 Medium
Termix: Authenticated blind SSRF through notification channel test endpoints
- Termix
- Server-side request forgery (SSRF)
- CVSS 9.8 CriticalCritical · CVSS 9+
Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
- Termix
- Command injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Termix: Missing authorization in SSH host credential resolution exposes stored credentials
- Termix
- Broken access control
- CVSS 8.8 High
Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts
- Termix
- Command injection
- CVSS 9.6 CriticalCritical · CVSS 9+
Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users
- Termix
- Broken access control
- CVSS 8.8 High
Termix: Account Takeover via Global Settings Disclosure
- Termix
- Broken access control
- CVSS 7.7 High
Termix: Server-Side Request Forgery via Proxy Connectivity Test
- Termix
- Server-side request forgery (SSRF)
- CVSS 9.0 CriticalCritical · CVSS 9+
Termix Vulnerable to Arbitrary Command Execution in File Manager
- Termix
- Command injection
- Broken access control
- CVSS 8.1 High
Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password
- Termix
- CWE-308
- CVSS 9.8 CriticalCritical · CVSS 9+
Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection
- Termix
- Command injection
- CVSS 9.0 CriticalCritical · CVSS 9+
Termix Vulnerable to Arbitrary Command Execution via Session Hijacking
- Termix
- Broken access control
- CVSS 9.9 CriticalCritical · CVSS 9+
Termix has an OS Command Injection in File Manager resolvePath endpoint
- Termix
- Command injection
- CVSS 8.1 High
Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)
- Termix
- Broken access control
- CVSS 8.0 High
Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft
- Termix
- Weak cryptography or TLS
- CVSS 9.9 CriticalCritical · CVSS 9+
Termix: OS Command Injection in Docker Container Management Endpoints
- Termix
- Command injection
- CVSS 8.7 High
Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypass
- Termix
- Command injection
- CVSS 8.1 High
Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTP
- Termix
- Authentication bypass
- CVSS 8.0 High
Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser
- Termix
- Cross-site scripting (XSS)
- Privilege escalation