Termix-SSH Termix (<= 2.9.2) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/termix-ssh-termix--2.9.2/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 02 Nov 2026 03:10:44 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgTermix-SSH Termix: Path traversal in transferToHost (CVE-2026-120322)https://feed.craftedsignal.io/briefs/2026-11-termix-ssh-traversal/Mon, 02 Nov 2026 03:10:44 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-11-termix-ssh-traversal/Termix-SSH Termix versions up to 2.9.2 are vulnerable to remote path traversal via the destPath argument in the /plugin-api/file-manager/transferToHost endpoint.CVE-2026-120322 identifies a critical path traversal vulnerability in Termix-SSH Termix versions 2.9.2 and earlier. The flaw exists within the /plugin-api/file-manager/transferToHost endpoint, specifically in the processing of the destPath argument. Successful exploitation allows a remote attacker to manipulate file system operations. The vulnerability has been addressed by forcing file transfers to use SFTP in File Manager plugin v1.0.0 and core version v26.10.0.

Impact

The vulnerability allows remote attackers to perform unauthorized file system operations. Publicly available exploit code exists, increasing the risk of active exploitation.

Recommendation

  • Immediately upgrade Termix-SSH Termix core to version v26.10.0 or higher.
  • Upgrade the File Manager plugin to v1.0.0 or higher.
  • If upgrading is not immediately possible, restrict network access to the /plugin-api/file-manager/transferToHost endpoint.
]]>criticaladvisorywebserverpath-traversalcve