Lucene search
+L

9 matches found

Cvelist
Cvelist
•added 2026/06/05 6:00 p.m.•63 views

CVE-2026-45748 Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The POST /ssh/tunnel/connect endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields endpointIP, endpointUsername,...

9.8CVSS0.01729EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2026/06/05 6:00 p.m.•14 views

CVE-2026-45748

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The POST /ssh/tunnel/connect endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields endpointIP, endpointUsername,...

9.8CVSS5.9AI score0.01729EPSS
SaveExploits1References3Affected Software1
EUVD
EUVD
•added 2026/06/05 6:00 p.m.•33 views

EUVD-2026-34876

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The POST /ssh/tunnel/connect endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields endpointIP, endpointUsername,...

9.8CVSS5.9AI score0.01729EPSS
SaveExploits1References2
Mend
Mend
•added 2026/06/05 6:00 p.m.•7 views

CVE-2026-45748

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The "POST /ssh/tunnel/connect" endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields "endpointIP", "endpointUsername",...

9.8CVSS5.9AI score0.01729EPSS
SaveExploits1References4
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•31 views

Termix operating system command injection vulnerability

Termix is a server management platform developed by Karmaa’s individual developers. Versions of Termix prior to 2.3.2 contained a vulnerability related to operating system command injection. This vulnerability stemmed from the POST /ssh/tunnel/connect endpoint, which directly inserted the...

9.8CVSS6.2AI score0.01729EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•10 views

CVE-2026-45748: Improper Neutralization of Special Elements used in an OS Command

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The POST /ssh/tunnel/connect endpoint in Termix prior to version 2.3.2 builds an SSH tunnel command by interpolating user-controlled host record fields endpointIP, endpointUsername,...

9.8CVSS5.9AI score0.01729EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2026/06/05 12:00 a.m.•47 views

PT-2026-47020

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2 Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing capabilities. The 'POST /ssh/tunnel/connect' endpoint allows persistent OS command injection on the...

9.8CVSS5.8AI score0.01729EPSS
SaveExploits1References8
osv_clsa
osv_clsa
•added 2026/04/20 10:59 a.m.•25 views

CLSA-2026-1776682775 libsoup: Fix of CVE-2026-5119

CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnelconnect CONNECT request for HTTPS targets...

8.2CVSS6.5AI score0.00259EPSS
SaveExploits1References1
osv_clsa
osv_clsa
•added 2026/04/20 10:44 a.m.•22 views

CLSA-2026-1776681849 libsoup: Fix of CVE-2026-5119

CVE-2026-5119: fix cleartext transmission of cookies to HTTP proxy in tunnelconnect CONNECT request for HTTPS targets...

8.2CVSS6.5AI score0.00259EPSS
SaveExploits1References1
Rows per page
Query Builder