termix records

9 published records for vendor termix.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 1
With a fix record: 22.2%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

9 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-45744No exploit	Termix has an OS Command Injection in File Manager resolvePath endpointtermix · termix · CWE-78 RCE Command injection	Critical9.9	—	3.0%	Jun 5, 2026
40Plan	CVE-2026-45748No exploit	Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injectiontermix · termix · CWE-78 pre-auth RCE Command injection	Critical9.8	—	2.5%	Jun 5, 2026
37Monitor	CVE-2025-59951No exploit	Termix' official Docker image contains an authentication bypass vulnerabilitytermix · termix · CWE-284 Pre-auth Auth bypass Broken access control (IDOR)	Critical9.2	—	4.3%	Oct 1, 2025
36Monitor	CVE-2026-45746Proof of concept	Termix Vulnerable to Arbitrary Command Execution via Session Hijackingtermix · termix · CWE-284 RCE Broken access control (IDOR)	Critical9.0	—	0.6%	Jun 5, 2026
36Monitor	CVE-2026-45750No exploit	Termix Vulnerable to Arbitrary Command Execution in File Managertermix · termix · CWE-78 RCE Command injection	Critical9.0	—	0.4%	Jun 5, 2026
32Monitor	CVE-2026-45749No exploit	Termix's TOTP two-factor authentication can be disabled or bypassed using only the account passwordtermix · termix · CWE-308	High8.1	—	0.5%	Jun 5, 2026
32Monitor	CVE-2026-45743No exploit	Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)termix · termix · CWE-639 Broken access control (IDOR)	High8.1	—	0.4%	Jun 5, 2026
32Monitor	CVE-2026-45745No exploit	Termix has improper certificate validation in Electron desktop client that enables MITM credential/token thefttermix · termix · CWE-295 Pre-auth Weak crypto	High8.0	—	0.2%	Jun 5, 2026
18Monitor	CVE-2026-22804Proof of concept	Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browsertermix · termix · CWE-79 Pre-auth XSS	Medium4.7	—	0.2%	Jan 12, 2026

CVE-2026-45744
40Plan
Termix has an OS Command Injection in File Manager resolvePath endpoint
CriticalCVSS 9.9No exploitEPSS 3%
- RCE
- Command injection
termix · termixJun 5, 2026
CVE-2026-45748
40Plan
Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection
CriticalCVSS 9.8No exploitEPSS 3%
- pre-auth RCE
- Command injection
termix · termixJun 5, 2026
CVE-2025-59951
37Monitor
Termix' official Docker image contains an authentication bypass vulnerability
CriticalCVSS 9.2No exploitEPSS 4%
termix · termixOct 1, 2025
CVE-2026-45746
36Monitor
Termix Vulnerable to Arbitrary Command Execution via Session Hijacking
CriticalCVSS 9.0Proof of conceptEPSS 1%
- RCE
- Broken access control (IDOR)
termix · termixJun 5, 2026
CVE-2026-45750
36Monitor
Termix Vulnerable to Arbitrary Command Execution in File Manager
CriticalCVSS 9.0No exploitEPSS 0%
- RCE
- Command injection
termix · termixJun 5, 2026
CVE-2026-45749
32Monitor
Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password
HighCVSS 8.1No exploitEPSS 0%
termix · termixJun 5, 2026
CVE-2026-45743
32Monitor
Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)
HighCVSS 8.1No exploitEPSS 0%
- Broken access control (IDOR)
termix · termixJun 5, 2026
CVE-2026-45745
32Monitor
Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft
HighCVSS 8.0No exploitEPSS 0%
- Pre-auth
- Weak crypto
termix · termixJun 5, 2026
CVE-2026-22804
18Monitor
Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser
MediumCVSS 4.7Proof of conceptEPSS 0%
- Pre-auth
- XSS
termix · termixJan 12, 2026