CVE-2026-45743

Name of the Vulnerable Software and Affected Versions Termix versions prior to 2.3.2

Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing capabilities. Sixteen file-manager endpoints fail to verify if the requesting user owns the SSH session identified by the sessionId variable. An authenticated attacker who obtains or guesses an active sessionId of another user can perform unauthorized actions, including reading, writing, deleting, downloading, and executing files on the victim's connected SSH host.

Recommendations Update to version 2.3.2.