CVE-2026-53548Proof of concept (PoC) published · CISA
Termix: IDOR — Authenticated user can fetch SSH passwords for hosts owned by other users
CVSS score
9.6
EPSS probability
%0.5
Risk score
0.0
Published
1 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
No verified public exploit code was found.
GitHub repositories, NVD exploit references and the Metasploit Framework were scanned. A record of active exploitation does not mean that public exploit code has been published.
Similar Vulnerabilities
9.8
CVE-2026-53545
Termix: Remote Code Execution via Tunnel Disconnect pkill Command Injection
T
Patch status unknownEPSS %1
8.8
CVE-2026-53542
Termix: Tar option injection in file-manager archive creation allows command execution on managed SSH hosts
T
Patch status unknownEPSS %1
8.8
CVE-2026-53547
Termix: Account Takeover via Global Settings Disclosure
T
Patch status unknownEPSS %1
9.6
CVE-2026-53546
Termix: Missing authorization in SSH host credential resolution exposes stored credentials
T
Patch status unknownEPSS %0
9.1
CVE-2026-79766
Termix: OS command injection in ACME/Let's Encrypt certificate-request handler via admin-controlled domain/email
T
Patch status unknownEPSS %0
7.7
CVE-2026-53549
Termix: Server-Side Request Forgery via Proxy Connectivity Test
T
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-53548"