T
Vendor security profile
Termix-SSH
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs14
Critical4
CISA KEV0
Public exploit10
Patch rate%0
Avg. CVSS7.5
12-month vulnerability rate
0
0
0
0
0
0
0
0
0
6
8
0
CVE KEV
CVE severity distribution
14toplam CVE
Critical4 (29%)
High4 (29%)
Medium6 (43%)
Patch and exploitation view
%0
Verified patch
%0
CISA KEV
%71
Public exploit
0Patch available
0Partial
0Workaround
0Vendor: no patch
14Unknown
Latest vulnerabilities
5.3
CVE-2026-79763
Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)
T
Patch status unknownEPSS %0
7.7
CVE-2026-79764
Termix: Authenticated SSRF via `/homepage/proxy` — No Destination Allowlist
T
Patch status unknownEPSS %0
5.5
CVE-2026-79762
Termix: Hardcoded default key encrypts all OIDC/WebAuthn users' stored SSH credentials — full offline decryption from a database copy
T
Patch status unknownEPSS %0
9.1
CVE-2026-79766
Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
T
Patch status unknownEPSS %0
4.3
CVE-2026-79759
Termix: Cross-User Information Disclosure via Missing Ownership Check in deploy-to-host Endpoint
T
Patch status unknownEPSS %0
6.6
CVE-2026-79761
Termix: Command injection in SSH key deployment verification
T
Patch status unknownEPSS %0
5.4
CVE-2026-79758
Termix: Authenticated users can read other users' host status and clear global SSH connections
T
Patch status unknownEPSS %0
6.4
CVE-2026-79760
Termix: Authenticated blind SSRF through notification channel test endpoints
T
Patch status unknownEPSS %0
9.8
CVE-2026-53545
Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
T
Patch status unknownEPSS %1
9.6
CVE-2026-53546
Termix: Missing authorization in SSH host credential resolution exposes stored credentials
T
Patch status unknownEPSS %0