These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
CVE-2026-79766 is a critical vulnerability in Termix, a web-based server management platform. An authenticated administrator can store malicious domain and email values, which can be interpolated into a certbot shell command, allowing execution of arbitrary operating-system commands as the Termix backend process. This issue is fixed in version 2.5.1.
CVE-2026-79762 debrief based on CVE Program and NVD records. Termix, a web-based server management platform, has a vulnerability in versions 1.7.0 to 2.5.1. The platform derives data encryption keys from default strings and userId salts. Without configured OIDC_SYSTEM_SECRET and WEBAUTHN_SYSTEM_SECRET, an attacker with an offline SQLite database copy can derive wrapping keys, recover users' DEKs, and decr [truncated]
CVE-2026-79761 is a command injection vulnerability in Termix, a web-based server management platform, affecting versions from 1.7.0 to 2.5.1. An authenticated user can deploy a crafted SSH credential to execute commands on the target host with the selected remote account's privileges. The vulnerability exists in the Termix SSH key deployment flow, where a grep pattern derived from a user-controlled publi [truncated]
CVE-2026-79760 is a vulnerability in Termix, a web-based server management platform, that allows authenticated users to trigger server-side requests to internal HTTP services through a notification-channel test endpoint. This issue, fixed in version 2.5.1, permits blind requests without destination allowlisting or private-address blocking. The vulnerability affects Termix versions from 2.5.0 until 2.5.1 a [truncated]
CVE-2026-79759 is a medium-severity vulnerability in Termix, a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The issue allows an attacker to deploy credentials to a host without proper authorization, potentially leading to unauthorized SSH connections. This vulnerability exists in the POST /credentials/:id/deploy-to-host endpoint, where differential erro [truncated]
The Termix web-based server management platform, prior to version 2.3.2, contains a vulnerability in the POST /host/db/proxy/test endpoint. This endpoint accepts singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. An authenticated user can exploit this vulnerability to probe localhost, private networks, link-local metadata services, and other infrastructu [truncated]
The CVE-2026-53548 vulnerability affects Termix, a web-based server management platform, prior to version 2.6.1. The vulnerability class is related to improper host ownership validation in the GET /host/db/host/:id/password endpoint, allowing an authenticated user with a valid JWT to enumerate sequential host IDs and retrieve SSH or sudo passwords belonging to other users. The likely operational impact is [truncated]
CVE-2026-53547 debrief based on the supplied source corpus. The CVE record was published on 2026-08-19T21:16:56.843Z. The vulnerability affects Termix, a web-based server management platform, prior to version 2.3.2. A low-privileged authenticated user can recover another local account's reset code and complete the normal password-reset flow, potentially leading to local-user account takeover and administr [truncated]
An authenticated low-privileged user can make Termix authenticate to an attacker-controlled SSH server and disclose another user's stored SSH password or private-key material. This issue is fixed in version 2.3.2. The vulnerability allows an attacker to access sensitive information, such as SSH passwords or private-key material, of other users. Defenders should assess exposure and apply the patch to preve [truncated]
CVE-2026-45749 is a high-severity vulnerability in Termix, a web-based server management platform. The vulnerability allows an attacker to bypass two-factor authentication (2FA) by using only a user's password to disable Time-Based One-Time Password (TOTP) or regenerate backup codes. This issue affects Termix versions prior to 2.3.2.
CVE-2026-45748 is a critical OS command injection vulnerability in Termix, a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields (`endpointIP`, `endpointUsername`, `password`) directly into a shell command wi [truncated]
CVE-2026-45746 is a critical Broken Access Control vulnerability in the Termix web-based server management platform. The vulnerability exists in the File Manager functionality prior to version 2.3.2. An attacker can manipulate the sessionId parameter to access active File Manager sessions belonging to other users, allowing unauthorized interaction with another user's remote filesystem and enabling direct [truncated]
CVE-2026-45745 is a HIGH severity vulnerability in Termix Desktop (Electron) that disables TLS certificate validation. This vulnerability, which has a CVSS score of 8, was published on 2026-06-05T18:17:30.180Z and last modified on 2026-06-08T15:02:28.243Z. The vulnerability affects Termix versions starting from 1.7.0. An attacker can exploit this vulnerability to intercept and modify HTTPS traffic to the [truncated]
CVE-2026-45744 is a critical OS command injection vulnerability in Termix, a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The vulnerability exists in the GET /ssh/file_manager/ssh/resolvePath endpoint, which uses double-quote escaping for shell command construction. This does not prevent $(...) and backtick command substitution, allowing an authenticate [truncated]
CVE-2026-45743 is a high-severity vulnerability in Termix, a web-based server management platform. The issue affects 16 file-manager endpoints in Termix versions prior to 2.3.2. These endpoints do not properly verify that the requesting user owns the SSH session identified by `sessionId`. This weakness allows an authenticated attacker who knows or guesses another user's active `sessionId` to perform vario [truncated]