Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality in Termix contains a critical Broken Access Control vulnerability due to improper validation of the sessionId parameter. The backend trusts a client-controlled identifier without verifying that it belongs to the authenticated user. This allows an attacker to manipulate the value and access active File Manager sessions belonging to other users. Since these sessions are tied to SSH connections to remote VPS instances, exploitation allows unauthorized interaction with another user's remote filesystem. Because the File Manager exposes functionality such as file reading, writing, uploading, and execution, this vulnerability enables direct command execution on another user's VPS (RCE). Version 2.3.2 patches the issue.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-06-06 | 2 | General2 |
| 2026-06-08 | 1 | Disclosure1 |
CVE-2026-45746 Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality i… https://www.cve.org/CVERecord?id=CVE-2026-45746
Post summary
The snippet references CVE‑2026‑45746 and basic product information without any details on the vulnerability, PoC, exploitation, or remediation.
CVE-2026-45746 - Critical RCE in Termix. Broken access control via sessionId manipulation. CVSS 9.0. No patch available. Restrict access immediately. #CVE #infosec #cybersecurity #CVEAlert #linux #python more FREE CVE Alerts Labs and Patched: https://www.valtersit.com/cve/CVE-2026-45746
Post summary
The tweet announces CVE-2026-45746 as a critical RCE in Termix caused by sessionId manipulation, rates CVSS 9.0, notes no patch is available, and urges immediate access restriction.
🚨*CVE* CVE-2026-45746 Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Manager functionality i… https://www.cve.org/CVERecord?id=CVE-2026-45746 ----- Traducción: CVE-2026-45746 Ter… http://infoflow.cloud`
Post summary
The post merely references CVE-2026-45746 and provides a link to its CVE record, without offering any PoC, exploit, or detailed technical information.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | termix | termix | - | - | - |