CyberRota
← Ana sayfaya dön

CVE-2026-42453

UNKNOWN · CVSS N/A EPSS %0.35 Public Exploit

Kaynak: NVD + CISA KEV + EPSS · Yayınlanma: 2026-05-08T23:16:38.967 · Çekilme zamanı: 2026-06-07T18:00:55.619637+00:00

CyberRota Yorumu

Uzaktan istismar edilebilir olabilir.

Public Exploit Sinyali

Bu CVE için açıklama veya referanslarda public exploit / PoC / GitHub / Metasploit sinyali tespit edildi.

GitHub PoC Linkleri
github.com ↗ github.com ↗

Not: Bu bağlantılar yalnızca güvenlik araştırması ve doğrulama amacıyla listelenmiştir.

CVE
CVE-2026-42453
Severity
UNKNOWN
CVSS
N/A
EPSS
%0.35

Orijinal NVD Açıklaması

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, the extractArchive and compressFiles endpoints in file-manager.ts use double-quoted strings for shell command construction, unlike all other file manager operations which use single-quote escaping. Double quotes allow $(command) substitution, enabling command injection on the remote SSH host. This issue has been patched in version 2.1.0.