CVE-2026-53549
Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /host/db/proxy/test endpoint accepts the singleProxy, proxyChain, and testTarget request fields without validating their destination addresses. The testProxyConnectivity path uses raw TCP and SOCKS connections to attacker-selected hosts and ports, allowing an authenticated user to probe localhost, private networks, link-local metadata services, and other infrastructure reachable from the Termix server. Structured connection errors disclose host reachability and timing information, and successful metadata access can expose cloud credentials. This issue is fixed in version 2.3.2.
- Affected products
- Termix
- Fix
- Available
- CVSS 3.1
- 7.7 HIGH
- EPSS
- 0.4% (36th percentile)
- Weakness
- CWE-918
- NVD status
- Received
- Published
- 2026-08-19
No indexed exploits for CVE-2026-53549 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2026-53549 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.