Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/resolvePath endpoint in Termix is vulnerable to OS command injection. The endpoint uses double-quote escaping for shell command construction, which does not prevent $(...) and backtick command substitution. Any authenticated user with an active File Manager SSH session can execute arbitrary commands on the connected remote host. Version 2.3.2 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-05 | 1 | General1 |
| 2026-06-07 | 2 | Disclosure2 |
| 2026-06-08 | 1 | Disclosure1 |
🔴 Termix, #OS Command Injection, #CVE-2026-45744 (Critical) -DC-Jun2026-273 https://dailycve.com/termix-os-command-injection-cve-2026-45744-critical-dc-jun2026-273/
Post summary
The post announces a critical OS command injection flaw in Termix (CVE-2026-45744) but provides no PoC, exploit, or mitigation details.
🚨*CVE* CVE-2026-45744 Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/re… https://www.cve.org/CVERecord?id=CVE-2026-45744 ----- Traducción: CVE-2026-45744 Ter… http://infoflow.cloud`
Post summary
The post announces CVE-2026-45744 affecting Termix versions prior to 2.3.2, providing a link to the CVE record but no further exploitation or mitigation details.
CVE-2026-45744 Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/file_manager/ssh/re… https://www.cve.org/CVERecord?id=CVE-2026-45744
Post summary
The snippet announces CVE-2026-45744 affecting the Termix platform before version 2.3.2, providing only a brief mention and a link to the CVE record.
CVE-2026-45744 OS Command Injection in Termix Web Server Management Platform Bef... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45744 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
The text merely identifies CVE-2026-45744 and provides a link for more information, offering no further technical or operational details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | termix | termix | - | - | - |