CVE-2026-45743: Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to…

PriorityP353high8.1CVSS 3.1

AVNACLPRLUINSUCHIHAN

EPSS

0.28%

19.9th percentile

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix prior to version 2.3.2 do not verify that the requesting user owns the SSH session identified by `sessionId`. An authenticated attacker who knows or guesses another user's active `sessionId` can read, write, delete, download, and execute files on the victim's connected SSH host. Version 2.3.2 patches the issue.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
termix-ssh	termix	< 2.3.2	2.3.2
termix	termix	>= 2.1.0 < 2.3.2	2.3.2

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.