CVE-2026-45750

🗓️ 05 Jun 2026 18:06:04Reported by GitHub_MType

cve🔗 web.nvd.nist.gov👁 32 Views🌐 WEB

Termix File Manager before version 2.3.2 executes a user-supplied path in a shell, enabling command execution.

Reporter	Title	Published	Views	Family All 10
ATTACKERKB	CVE-2026-45750	5 Jun 202618:06	–	attackerkb
Circl	CVE-2026-45750	5 Jun 202619:46	–	circl
CNNVD	Termix 安全漏洞	5 Jun 202600:00	–	cnnvd
Cvelist	CVE-2026-45750 Termix Vulnerable to Arbitrary Command Execution in File Manager	5 Jun 202618:06	–	cvelist
EUVD	EUVD-2026-34878	5 Jun 202618:06	–	euvd
NVD	CVE-2026-45750	5 Jun 202618:17	–	nvd
OSV	CVE-2026-45750 Termix Vulnerable to Arbitrary Command Execution in File Manager	5 Jun 202618:06	–	osv
Positive Technologies	PT-2026-47022	5 Jun 202600:00	–	ptsecurity
RedhatCVE	CVE-2026-45750	6 Jun 202618:43	–	redhatcve
Vulnrichment	CVE-2026-45750 Termix Vulnerable to Arbitrary Command Execution in File Manager	5 Jun 202618:06	–	vulnrichment

NVD

Vulners

Node

termix termixRange2.1.0–2.3.2

[
  {
    "vendor": "Termix-SSH",
    "product": "Termix",
    "versions": [
      {
        "version": "< 2.3.2",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/Termix-SSH/Termix/security/advisories/GHSA-v26q-rpv5-9m72
github	www.github.com/Termix-SSH/Termix/releases/tag/release-2.3.2-tag

Parameter	Position	Path	Description	CWE
path	query param	/ssh/file_manager/ssh/resolvePath	Unsafe processing of the path parameter in GET /ssh/file_manager/ssh/resolvePath leads to shell command injection via unescaped command substitution within double quotes.	CWE-639, CWE-78

17 Jun 2026 10:52Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.19

EPSS0.00294

SSVC