{"id":"CVE-2026-79758","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-79758","generatedAt":"2026-10-28T00:53:05.708Z","title":"GET /status returns statuses for hosts the requester cannot access, GET /status/:id accepts an attacker-supplied numeric host identifier, and POST /clear-connections permits a regular user to clear the global SSH connection pool.","description":"Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 1.8.0 until 2.5.1, authenticated Termix users can access the server-stats API without per-host authorization. GET /status returns statuses for hosts the requester cannot access, GET /status/:id accepts an attacker-supplied numeric host identifier, and POST /clear-connections permits a regular user to clear the global SSH connection pool. The affected src/backend/ssh/server-stats.ts routes expose host online or offline state and lastChecked timestamps and can disrupt other users' active sessions or pooled connections. Unauthenticated requests remain blocked, but authentication alone does not preserve tenant isolation. This issue is fixed in version 2.5.1.","published":"2026-09-24T16:17:11.000Z","lastModified":"2026-09-24T19:39:46.000Z","status":"Deferred","sourceIdentifier":"security-advisories@github.com","cvss":{"version":"3.1","score":5.4,"severity":"MEDIUM","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L"},"cwe":["CWE-284","CWE-639","CWE-862"],"affected":[],"epss":{"score":0.00435,"percentile":0.37575,"date":"2026-10-26","history":[{"date":"2026-09-25","score":0.00435,"percentile":0.35213}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own."},"changes":[{"kind":"new","label":"New CVE","at":"2026-09-24T16:17:11.000Z","detail":{"score":"5.4","severity":"MEDIUM","publishedAt":"2026-09-24T16:17:11.107Z"},"summary":"New CVE, medium severity (CVSS 5.4)."}],"references":[{"url":"https://github.com/Termix-SSH/Termix/commit/ddbdd5c437c2296607dfaa4265d6f63fbc1ca92e","source":"security-advisories@github.com"},{"url":"https://github.com/Termix-SSH/Termix/pull/1067","source":"security-advisories@github.com"},{"url":"https://github.com/Termix-SSH/Termix/releases/tag/release-2.5.1-tag","source":"security-advisories@github.com"},{"url":"https://github.com/Termix-SSH/Termix/security/advisories/GHSA-372w-6f3h-vcm4","source":"security-advisories@github.com"},{"url":"https://github.com/Termix-SSH/Termix/security/advisories/GHSA-372w-6f3h-vcm4","source":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-79758","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}