Recent Advisories

Severity ID Title Vendor Product Date Type
CRITICAL 9.8 CVE-2026-45748

Termix Vulnerable to Remote Code Execution via SSH Tunnel Forward Command Injection_CVE-2026-45748

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. The `POST /ssh/tunnel/connect` endpoi...

Termix-SSH Termix < 2.3.2 CVE
CRITICAL 9 CVE-2026-45746

Termix Vulnerable to Arbitrary Command Execution via Session Hijacking_CVE-2026-45746

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the File Mana...

Termix-SSH Termix < 2.3.2 CVE
HIGH 8 CVE-2026-45745

Termix has improper certificate validation in Electron desktop client that enables MITM credential/token theft_CVE-2026-45745

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Starting in version 1.7.0, Termix Des...

Termix-SSH Termix >= 1.7.0, <= 2.2.1 CVE
CRITICAL 9.9 CVE-2026-45744

Termix has an OS Command Injection in File Manager resolvePath endpoint_CVE-2026-45744

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.3.2, the GET /ssh/...

Termix-SSH Termix < 2.3.2 CVE
HIGH 8.1 CVE-2026-45743

Termix has a File-Manager Session Hijack via Missing Ownership Check (IDOR)_CVE-2026-45743

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. 16 file-manager endpoints in Termix p...

Termix-SSH Termix < 2.3.2 CVE
MEDIUM 5.9 CVE-2026-2379

Arista EOS IPsec Tunnel Sequence Number Mismatch via Interface Flaps when Anti-Replay is Disabled_CVE-2026-2379

On affected platforms with hardware IPSec support running Arista EOS with certain IPsec features enabled, EOS may exhibit unexpected behavior in sp...

Arista Networks EOS 4.34.0 CVE
CRITICAL 9.3 CVE-2025-71318

NetMan 204 Missing Authentication for Administrative Functions_CVE-2025-71318

NetMan 204 fails to enforce authentication on its administrative pages and command endpoints. A remote, unauthenticated attacker can directly reque...

Riello UPS NetMan 204 CVE
CRITICAL 9.3 CVE-2025-71317

NetMan 204 Hard-coded Backdoor Credentials_CVE-2025-71317

NetMan 204 contains a hard-coded backdoor account with the username and password 'eurek' that grants administrative access. A remote, unauthenticat...

Riello UPS NetMan 204 CVE
HIGH 8.8 CVE-2026-5415

WP Captcha PRO <= 5.38 - Authenticated (Subscriber+) Authentication Bypass via Temporary Login Link_CVE-2026-5415

The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to Aut...

webfactory Advanced Google reCAPTCHA CVE
HIGH 8.8 CVE-2026-5411

WP Captcha PRO <= 5.38 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Upload_CVE-2026-5411

The WP Captcha PRO (the premium version of the Advanced Google reCAPTCHA plugin, both have the same slug) plugin for WordPress is vulnerable to arb...

webfactory Advanced Google reCAPTCHA CVE