CVE-2026-45750

🗓️ 05 Jun 2026 18:06:04Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 55 Views🌐 WEB

Termix File Manager before version 2.3.2 executes a user-supplied path in a shell, enabling command execution.

Reporter	Title	Published	Views	Family All 11
attackerkb	CVE-2026-45750	5 Jun 202618:06	–	attackerkb
Circl	CVE-2026-45750	5 Jun 202619:46	–	circl
CNNVD	Termix 安全漏洞	5 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-45750 Termix Vulnerable to Arbitrary Command Execution in File Manager	5 Jun 202618:06	–	cvelist
EUVD	EUVD-2026-34878	5 Jun 202618:06	–	euvd
Kitploit	Termix-research	5 Oct 202603:40	–	kitploit
NVD	CVE-2026-45750	5 Jun 202618:17	–	nvd
Positive Technologies	PT-2026-47022	5 Jun 202600:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2026-45750: Improper Neutralization of Special Elements used in an OS Command	5 Jun 202600:00	–	rapid7
RedhatCVE	CVE-2026-45750	6 Jun 202618:43	–	redhatcve

NVD

Vulners

Node

termix termixRange2.1.0–2.3.2

[
  {
    "vendor": "Termix-SSH",
    "product": "Termix",
    "versions": [
      {
        "version": "< 2.3.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag
github	www.github.com/Termix-SSH/Termix/security/advisories/GHSA-v26q-rpv5-9m72

Parameter	Position	Path	Description	CWE
path	path	/ssh/file_manager/ssh/resolvePath	Pre-2.3.2 Termix File Manager endpoint unsafely embeds a user-controlled path into a shell command executed over SSH, allowing command substitution via $(...).	CWE-639, CWE-78

17 Jun 2026 10:52Current

6Medium risk

Vulners AI Score6

CVSS 3.19

EPSS0.00428

SSVC