CVE-2026-45750

CRITICAL EPSS 21.0%
Published Jun 5, 20263w ago · Modified Jun 17, 20261w ago
9.0 CVSS 3.1
Critical
Find Similar
Published Jun 5, 2026 3w ago
Last Modified Jun 17, 2026 1w ago

Description

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in the Termix File Manager component unsafely processes the path parameter and embeds it into a shell command executed over the active SSH session. Because the user-controlled value is placed inside double quotes and only double quotes are escaped, shell command substitution syntax such as $(...) is still interpreted by the remote shell. Version 2.3.2 fixes the issue.

CVSS Details

Base Score
9.0
Exploitability
2.3
Impact
6.0
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
Attack Vector Network
Attack Complexity Low
Privileges Required Low
User Interaction Required
Scope Changed
Confidentiality High
Integrity High
Availability High

Threat Intelligence

EPSS Exploit Probability
21.0% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available

Weaknesses 2

CWE-639
CWE-78 OS Command Injection Injection

Affected Products 1

VendorProductVersionRange
termixtermix*≥2.1.0  –  <2.3.2

References 2

  • github.com https://github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag
    ProductRelease Notes
  • github.com https://github.com/Termix-SSH/Termix/security/advisories/GHSA-v26q-rpv5-9m72
    ExploitVendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.