agentprime: termixEvery new CVE for termix.https://agentprime.io/CVE-2026-120322: Termix-SSH Termix transferToHost path traversalhttps://agentprime.io/advisories/CVE-2026-120322/https://agentprime.io/advisories/CVE-2026-120322/CVSS 9.4 (Critical). Critical: CVSS score 9.4: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 02 Nov 2026 01:45:41 GMTCVEcriticalCVE-2026-79763: Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)https://agentprime.io/advisories/CVE-2026-79763/https://agentprime.io/advisories/CVE-2026-79763/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 16:06:16 GMTCVECVE-2026-79764: Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlisthttps://agentprime.io/advisories/CVE-2026-79764/https://agentprime.io/advisories/CVE-2026-79764/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 16:02:48 GMTCVECVE-2026-79762: Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copyhttps://agentprime.io/advisories/CVE-2026-79762/https://agentprime.io/advisories/CVE-2026-79762/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 16:01:42 GMTCVECVE-2026-79766: Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/emailhttps://agentprime.io/advisories/CVE-2026-79766/https://agentprime.io/advisories/CVE-2026-79766/CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 16:00:49 GMTCVEcriticalCVE-2026-79759: Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpointhttps://agentprime.io/advisories/CVE-2026-79759/https://agentprime.io/advisories/CVE-2026-79759/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 15:59:43 GMTCVECVE-2026-79761: Termix: Command injection in SSH key deployment verificationhttps://agentprime.io/advisories/CVE-2026-79761/https://agentprime.io/advisories/CVE-2026-79761/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 15:58:48 GMTCVECVE-2026-79758: Termix: Authenticated users can read other users' host status and clear global SSH connectionshttps://agentprime.io/advisories/CVE-2026-79758/https://agentprime.io/advisories/CVE-2026-79758/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 15:57:54 GMTCVECVE-2026-79760: Termix: Authenticated blind SSRF through notification channel test endpointshttps://agentprime.io/advisories/CVE-2026-79760/https://agentprime.io/advisories/CVE-2026-79760/CVSS 6.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 24 Sep 2026 15:46:46 GMTCVECVE-2026-53545: Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injectionhttps://agentprime.io/advisories/CVE-2026-53545/https://agentprime.io/advisories/CVE-2026-53545/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:36:51 GMTCVEcriticalCVE-2026-53546: Termix: Missing authorization in SSH host credential resolution exposes stored credentialshttps://agentprime.io/advisories/CVE-2026-53546/https://agentprime.io/advisories/CVE-2026-53546/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:36:19 GMTCVEcriticalCVE-2026-53542: Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hostshttps://agentprime.io/advisories/CVE-2026-53542/https://agentprime.io/advisories/CVE-2026-53542/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:35:58 GMTCVECVE-2026-53548: Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other usershttps://agentprime.io/advisories/CVE-2026-53548/https://agentprime.io/advisories/CVE-2026-53548/CVSS 9.6 (Critical). Critical: CVSS score 9.6: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:35:35 GMTCVEcriticalCVE-2026-53547: Termix: Account Takeover via Global Settings Disclosurehttps://agentprime.io/advisories/CVE-2026-53547/https://agentprime.io/advisories/CVE-2026-53547/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:34:52 GMTCVECVE-2026-53549: Termix: Server-Side Request Forgery via Proxy Connectivity Testhttps://agentprime.io/advisories/CVE-2026-53549/https://agentprime.io/advisories/CVE-2026-53549/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 19 Aug 2026 20:34:22 GMTCVECVE-2026-45750: Termix Vulnerable to Arbitrary Command Execution in File Managerhttps://agentprime.io/advisories/CVE-2026-45750/https://agentprime.io/advisories/CVE-2026-45750/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:06:04 GMTCVEcriticalCVE-2026-45749: Termix's TOTP two-factor authentication can be disabled or bypassed using only the account passwordhttps://agentprime.io/advisories/CVE-2026-45749/https://agentprime.io/advisories/CVE-2026-45749/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:05:11 GMTCVECVE-2026-45748: Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injectionhttps://agentprime.io/advisories/CVE-2026-45748/https://agentprime.io/advisories/CVE-2026-45748/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 18:00:26 GMTCVEcriticalCVE-2026-45746: Termix Vulnerable to Arbitrary Command Execution via Session Hijackinghttps://agentprime.io/advisories/CVE-2026-45746/https://agentprime.io/advisories/CVE-2026-45746/CVSS 9.0 (Critical). Critical: CVSS score 9.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 17:59:23 GMTCVEcriticalCVE-2026-45744: Termix has an OS Command Injection in File Manager resolvePath endpointhttps://agentprime.io/advisories/CVE-2026-45744/https://agentprime.io/advisories/CVE-2026-45744/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 17:58:05 GMTCVEcriticalCVE-2026-45743: Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)https://agentprime.io/advisories/CVE-2026-45743/https://agentprime.io/advisories/CVE-2026-45743/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 17:56:53 GMTCVECVE-2026-45745: Termix has improper certificate validation in Electron desktop client that enables MITM credential/token thefthttps://agentprime.io/advisories/CVE-2026-45745/https://agentprime.io/advisories/CVE-2026-45745/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 05 Jun 2026 17:53:54 GMTCVECVE-2026-42454: Termix: OS Command Injection in Docker Container Management Endpointshttps://agentprime.io/advisories/CVE-2026-42454/https://agentprime.io/advisories/CVE-2026-42454/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 22:56:17 GMTCVEcriticalCVE-2026-42453: Termix: Command injection in extractArchive/compressFiles via double-quote escaping bypasshttps://agentprime.io/advisories/CVE-2026-42453/https://agentprime.io/advisories/CVE-2026-42453/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 22:55:30 GMTCVECVE-2026-42452: Termix: Pending-TOTP temporary token can regenerate backup codes and neutralize TOTPhttps://agentprime.io/advisories/CVE-2026-42452/https://agentprime.io/advisories/CVE-2026-42452/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 08 May 2026 22:54:12 GMTCVECVE-2026-22804: Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browserhttps://agentprime.io/advisories/CVE-2026-22804/https://agentprime.io/advisories/CVE-2026-22804/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 12 Jan 2026 22:14:03 GMTCVE