Termix-SSH Termix vulnerabilities
26 published CVEs name Termix-SSH Termix among the affected products.
- 26Published CVEs26 of them scored
- 26Last 12 monthspublished in the last year
- 10Critical10 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-120322
Termix-SSH Termix transferToHost path traversal
Termix-SSH · Termix
Critical9.4 - CVE-2026-79763
Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)
Termix-SSH · Termix
Medium5.3 - CVE-2026-79764
Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
Termix-SSH · Termix
High7.7 - CVE-2026-79762
Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy
Termix-SSH · Termix
Medium5.5 - CVE-2026-79766
Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
Termix-SSH · Termix
Critical9.1 - CVE-2026-79759
Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint
Termix-SSH · Termix
Medium4.3 - CVE-2026-79761
Termix: Command injection in SSH key deployment verification
Termix-SSH · Termix
Medium6.6 - CVE-2026-79758
Termix: Authenticated users can read other users' host status and clear global SSH connections
Termix-SSH · Termix
Medium5.4 - CVE-2026-79760
Termix: Authenticated blind SSRF through notification channel test endpoints
Termix-SSH · Termix
Medium6.4 - CVE-2026-53545
Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
Termix-SSH · Termix
Critical9.8