Product

Termix-SSH Termix (<= 2.9.2)

1 brief RSS

Termix-SSH Termix: Path traversal in transferToHost (CVE-2026-120322)

Termix-SSH Termix versions up to 2.9.2 are vulnerable to remote path traversal via the destPath argument in the /plugin-api/file-manager/transferToHost endpoint.

Termix-SSH Termix webserver path-traversal cve

1r 1t 1c 7m ago