# Termix-SSH Termix vulnerabilities Source: https://junglewise.ai/threats/technologies/termix Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/termix.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 17 vulnerabilities in Termix-SSH Termix: 0 in the last 7 days and 8 in the last 90 days, 7 of them critical and 0 exploited in the wild. The most recent, CVE-2026-120322, was published on 2 November 2026. 1 vulnerability in the last four weeks, down 86% on the four before (7). 1 critical against 1. ## Counts - Last 7 days: 0 - Last 30 days: 1 - Last 90 days: 8 - All time: 17 (7 critical, 0 exploited in the wild) ## About Termix-SSH Termix An SSH client application for mobile devices. ## Latest Termix-SSH Termix vulnerabilities - [CVE-2026-120322: Termix file-manager path traversal in transferToHost](https://junglewise.ai/threats/cve-2026-120322-a-vulnerability-was-identified-in-termix-ssh-termix-up-to-2-9-2) (critical, CVSS 9.9, published 2 Nov 2026) - [CVE-2026-79766: Termix command injection in ACME SSL settings](https://junglewise.ai/threats/cve-2026-79766-termix-is-a-web-based-server-management-platform-with-ssh) (critical, CVSS 9.1, published 24 Sep 2026) - [CVE-2026-79764: Termix server management platform SSRF via proxy endpoint](https://junglewise.ai/threats/cve-2026-79764-termix-is-a-web-based-server-management-platform-with-ssh) (high, CVSS 7.7, published 24 Sep 2026) - [CVE-2026-79763: Termix two-factor authentication bypass in TOTP disable endpoints](https://junglewise.ai/threats/cve-2026-79763-termix-is-a-web-based-server-management-platform-with-ssh) (medium, CVSS 5.3, published 24 Sep 2026) - [CVE-2026-79762: Termix weak key derivation in OIDC and WebAuthn user encryption](https://junglewise.ai/threats/cve-2026-79762-termix-is-a-web-based-server-management-platform-with-ssh) (medium, CVSS 5.5, published 24 Sep 2026) - [CVE-2026-79761: Termix SSH key deployment command injection](https://junglewise.ai/threats/cve-2026-79761-termix-is-a-web-based-server-management-platform-with-ssh) (medium, CVSS 6.6, published 24 Sep 2026) - [CVE-2026-79760: Termix server-side request forgery in notification test](https://junglewise.ai/threats/cve-2026-79760-termix-is-a-web-based-server-management-platform-with-ssh) (medium, CVSS 6.4, published 24 Sep 2026) - [CVE-2026-79759: Termix credential access control bypass in deployment endpoint](https://junglewise.ai/threats/cve-2026-79759-termix-is-a-web-based-server-management-platform-with-ssh) (medium, CVSS 4.3, published 24 Sep 2026) - [CVE-2026-45750: Termix OS command injection in File Manager resolvePath](https://junglewise.ai/threats/cve-2026-45750-termix-os-command-injection-in-file-manager-resolvepath) (critical, CVSS 9, published 5 Jun 2026) - [CVE-2026-45749: Termix MFA bypass via single-factor authentication in TOTP endpoints](https://junglewise.ai/threats/cve-2026-45749-termix-mfa-bypass-via-single-factor-authentication-in-totp) (high, CVSS 8.1, published 5 Jun 2026) - [CVE-2026-45748: Termix OS command injection in SSH tunnel connection](https://junglewise.ai/threats/cve-2026-45748-termix-os-command-injection-in-ssh-tunnel-connection) (critical, CVSS 9.8, published 5 Jun 2026) - [CVE-2026-45746: Termix broken access control in File Manager sessionId validation](https://junglewise.ai/threats/cve-2026-45746-termix-broken-access-control-in-file-manager-sessionid-validation) (critical, CVSS 9, published 5 Jun 2026) - [CVE-2026-45744: Termix OS command injection in File Manager resolvePath](https://junglewise.ai/threats/cve-2026-45744-termix-os-command-injection-in-file-manager-resolvepath) (critical, CVSS 9.9, published 5 Jun 2026) - [CVE-2026-45743: Termix authorization bypass in file-manager endpoints](https://junglewise.ai/threats/cve-2026-45743-termix-authorization-bypass-in-file-manager-endpoints) (high, CVSS 8.1, published 5 Jun 2026) - [CVE-2026-42454: Termix-SSH Termix OS command injection in Docker management endpoints](https://junglewise.ai/threats/cve-2026-42454-termix-ssh-termix-os-command-injection-in-docker-management) (critical, CVSS 9.9, published 8 May 2026) - [CVE-2026-42453: Termix-SSH Termix command injection in file-manager.ts](https://junglewise.ai/threats/cve-2026-42453-termix-ssh-termix-command-injection-in-file-manager-ts) (info, CVSS 8.7, published 8 May 2026) - [CVE-2026-42452: Termix-SSH Termix two-factor authentication bypass in auth middleware](https://junglewise.ai/threats/cve-2026-42452-termix-ssh-termix-two-factor-authentication-bypass-in-auth) (high, CVSS 8.1, published 8 May 2026) ## Most severe Termix-SSH Termix vulnerabilities - [CVE-2026-42454: Termix-SSH Termix OS command injection in Docker management endpoints](https://junglewise.ai/threats/cve-2026-42454-termix-ssh-termix-os-command-injection-in-docker-management) (critical, CVSS 9.9, published 8 May 2026) - [CVE-2026-120322: Termix file-manager path traversal in transferToHost](https://junglewise.ai/threats/cve-2026-120322-a-vulnerability-was-identified-in-termix-ssh-termix-up-to-2-9-2) (critical, CVSS 9.9, published 2 Nov 2026) - [CVE-2026-45744: Termix OS command injection in File Manager resolvePath](https://junglewise.ai/threats/cve-2026-45744-termix-os-command-injection-in-file-manager-resolvepath) (critical, CVSS 9.9, published 5 Jun 2026) - [CVE-2026-45748: Termix OS command injection in SSH tunnel connection](https://junglewise.ai/threats/cve-2026-45748-termix-os-command-injection-in-ssh-tunnel-connection) (critical, CVSS 9.8, published 5 Jun 2026) - [CVE-2026-79766: Termix command injection in ACME SSL settings](https://junglewise.ai/threats/cve-2026-79766-termix-is-a-web-based-server-management-platform-with-ssh) (critical, CVSS 9.1, published 24 Sep 2026) - [CVE-2026-45750: Termix OS command injection in File Manager resolvePath](https://junglewise.ai/threats/cve-2026-45750-termix-os-command-injection-in-file-manager-resolvepath) (critical, CVSS 9, published 5 Jun 2026) - [CVE-2026-45746: Termix broken access control in File Manager sessionId validation](https://junglewise.ai/threats/cve-2026-45746-termix-broken-access-control-in-file-manager-sessionid-validation) (critical, CVSS 9, published 5 Jun 2026) - [CVE-2026-42452: Termix-SSH Termix two-factor authentication bypass in auth middleware](https://junglewise.ai/threats/cve-2026-42452-termix-ssh-termix-two-factor-authentication-bypass-in-auth) (high, CVSS 8.1, published 8 May 2026) - [CVE-2026-45749: Termix MFA bypass via single-factor authentication in TOTP endpoints](https://junglewise.ai/threats/cve-2026-45749-termix-mfa-bypass-via-single-factor-authentication-in-totp) (high, CVSS 8.1, published 5 Jun 2026) - [CVE-2026-45743: Termix authorization bypass in file-manager endpoints](https://junglewise.ai/threats/cve-2026-45743-termix-authorization-bypass-in-file-manager-endpoints) (high, CVSS 8.1, published 5 Jun 2026) ## Vulnerabilities per week 1 vulnerability in the last four weeks, down 86% on the four before (7). 1 critical against 1. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 7 | 1 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 1 | 1 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Termix-SSH Termix vulnerabilities", https://junglewise.ai/threats/technologies/termix, 9 November 2026.