CVE-2026-45745

Name of the Vulnerable Software and Affected Versions Termix Desktop (Electron) versions 1.7.0 and later

Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing capabilities. The desktop version disables TLS certificate validation, which allows a machine-in-the-middle attacker to intercept and modify HTTPS traffic between the client and the configured Termix server. This flaw can result in the theft of credentials and JSON Web Tokens (JWT), which are compact, URL-safe means of representing claims to be transferred between two parties, as well as session theft during login and general operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.