CVE-2026-79763

Name of the Vulnerable Software and Affected Versions Termix versions 2.4.0 through 2.5.0

Description Termix is a web-based server management platform providing SSH terminal, tunneling, and file editing. A regression in the reauthentication process allows the endpoints 'POST /users/totp/disable' and 'POST /users/totp/backup-codes' to accept an account password as the only required factor. This occurs because the verifyTotpReauth() function in src/backend/database/routes/user-totp-routes.ts returns success upon password validation via bcrypt.compare(), treating the password and totp code as interchangeable credentials. An attacker with an authenticated session and the user's password can disable Time-based One-Time Password (TOTP) protection or regenerate backup codes, effectively reducing the account security to single-factor authentication.

Recommendations Update to version 2.5.1.