CVE-2026-79760

Name of the Vulnerable Software and Affected Versions Termix versions 2.5.0 through 2.5.0

Description Authenticated users can configure webhook or ntfy notification channels using destination URLs controlled by an attacker. By using the notification-channel test endpoint, an attacker can trigger server-side requests. The request path in src/backend/database/routes/alert-rules-routes.ts reaches src/backend/utils/notification-sender.ts without destination allowlisting or private-address blocking, enabling blind requests to internal HTTP services reachable by the server. In webhook mode, attackers can also control HTTP methods and headers, potentially causing limited state changes in internal services that accept the fixed notification body, although response bodies are not returned.

Recommendations Update to version 2.5.1.