CVE-2026-53549 Termix-SSH CVE debrief

Who should care

System administrators and security teams managing Termix servers, especially those with versions prior to 2.3.2, should be aware of this vulnerability. Additionally, organizations using Termix for server management should take note of the potential risks and implement necessary defensive measures.

Technical summary

The Termix web-based server management platform, prior to version 2.3.2, has a vulnerability in the POST /host/db/proxy/test endpoint. This endpoint accepts singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. An authenticated user can use the testProxyConnectivity path to probe localhost, private networks, link-local metadata services, and other infrastructure reachable from the Termix server using raw TCP and SOCKS connections. This allows for potential disclosure of host reachability and timing information, as well as exposure of cloud credentials through successful metadata access. The issue is addressed in version 2.3.2.

Defensive priority

Authenticated users with low privileges can probe localhost, private networks, and cloud infrastructure, potentially disclosing sensitive information.

Recommended defensive actions

• Inventory and verify Termix server installations, especially versions prior to 2.3.2.
• Restrict access to the POST /host/db/proxy/test endpoint.
• Implement compensating controls, such as network segmentation and monitoring.
• Apply the vendor-provided patch in version 2.3.2.
• Review relevant monitoring, detection, and logs for exposed assets that need extra review.
• Track exceptions, retest remediated assets, and close the item only after evidence is documented.
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up.

Evidence notes

The CVE-2026-53549 issue exists in Termix, a web-based server management platform, prior to version 2.3.2. An authenticated user can exploit the POST /host/db/proxy/test endpoint to probe localhost, private networks, link-local metadata services, and other infrastructure reachable from the Termix server. Structured connection errors disclose host reachability and timing information, and successful metadata access can expose cloud credentials. This issue is fixed in version 2.3.2. Evidence is based on official CVE and NVD records, and source references from [email protected].

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.