termix kayıtları
termix üreticisine ait 9 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 1
- Düzeltme kaydı olan
- %22,2
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')3
- CWE-284 Improper Access Control2
- CWE-295 Improper Certificate Validation1
- CWE-308 Use of Single-factor Authentication1
- CWE-639 Authorization Bypass Through User-Controlled Key1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
9 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2026-45744İstismar yok | Termix has an OS Command Injection in File Manager resolvePath endpointtermix · termix · CWE-78 | Kritik9,9 | — | %3,0 | 5 Haz 2026 |
40Planlayın | CVE-2026-45748İstismar yok | Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injectiontermix · termix · CWE-78 | Kritik9,8 | — | %2,5 | 5 Haz 2026 |
37İzleyin | CVE-2025-59951İstismar yok | Termix' official Docker image contains an authentication bypass vulnerabilitytermix · termix · CWE-284 | Kritik9,2 | — | %4,3 | 1 Eki 2025 |
36İzleyin | CVE-2026-45746Kavram kanıtı | Termix Vulnerable to Arbitrary Command Execution via Session Hijackingtermix · termix · CWE-284 | Kritik9,0 | — | %0,6 | 5 Haz 2026 |
36İzleyin | CVE-2026-45750İstismar yok | Termix Vulnerable to Arbitrary Command Execution in File Managertermix · termix · CWE-78 | Kritik9,0 | — | %0,4 | 5 Haz 2026 |
32İzleyin | CVE-2026-45749İstismar yok | Termix's TOTP two-factor authentication can be disabled or bypassed using only the account passwordtermix · termix · CWE-308 | Yüksek8,1 | — | %0,5 | 5 Haz 2026 |
32İzleyin | CVE-2026-45743İstismar yok | Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)termix · termix · CWE-639 | Yüksek8,1 | — | %0,4 | 5 Haz 2026 |
32İzleyin | CVE-2026-45745İstismar yok | Termix has improper certificate validation in Electron desktop client that enables MITM credential/token thefttermix · termix · CWE-295 | Yüksek8,0 | — | %0,2 | 5 Haz 2026 |
18İzleyin | CVE-2026-22804Kavram kanıtı | Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browsertermix · termix · CWE-79 | Orta4,7 | — | %0,2 | 12 Oca 2026 |
- CVE-2026-4574440Planlayın
Termix has an OS Command Injection in File Manager resolvePath endpoint
KritikCVSS 9,9İstismar yokEPSS %3termix · termix5 Haz 2026
- CVE-2026-4574840Planlayın
Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection
KritikCVSS 9,8İstismar yokEPSS %3termix · termix5 Haz 2026
- CVE-2025-5995137İzleyin
Termix' official Docker image contains an authentication bypass vulnerability
KritikCVSS 9,2İstismar yokEPSS %4termix · termix1 Eki 2025
- CVE-2026-4574636İzleyin
Termix Vulnerable to Arbitrary Command Execution via Session Hijacking
KritikCVSS 9,0Kavram kanıtıEPSS %1termix · termix5 Haz 2026
- CVE-2026-4575036İzleyin
Termix Vulnerable to Arbitrary Command Execution in File Manager
KritikCVSS 9,0İstismar yokEPSS %0termix · termix5 Haz 2026
- CVE-2026-4574932İzleyin
Termix's TOTP two-factor authentication can be disabled or bypassed using only the account password
YüksekCVSS 8,1İstismar yokEPSS %0termix · termix5 Haz 2026
- CVE-2026-4574332İzleyin
Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)
YüksekCVSS 8,1İstismar yokEPSS %0termix · termix5 Haz 2026
- CVE-2026-4574532İzleyin
Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft
YüksekCVSS 8,0İstismar yokEPSS %0termix · termix5 Haz 2026
- CVE-2026-2280418İzleyin
Termix has a Stored XSS in File Manager leading to Local File Inclusion (LFI) in Electron and Session Hijacking in Browser
OrtaCVSS 4,7Kavram kanıtıEPSS %0termix · termix12 Oca 2026