CVE-2026-79763

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor regressed the two-factor check introduced for CVE-2026-45749. In src/backend/database/routes/user-totp-routes.ts, verifyTotpReauth returns success when bcrypt.compare validates the password, while each endpoint chooses password or totp_code as an interchangeable credential. An attacker who has a victim's authenticated session and knows the password can disable TOTP or regenerate and invalidate backup codes without an authenticator or valid second factor, weakening the account to single-factor authentication. This issue is fixed in version 2.5.1.

• CWE-308

• https://github.com/Termix-SSH/Termix/commit/22124e1bc49c8cedad57b31de9c51ad39f3d4432
• https://github.com/Termix-SSH/Termix/commit/ddbdd5c437c2296607dfaa4265d6f63fbc1ca92e
• https://github.com/Termix-SSH/Termix/pull/1067
• https://github.com/Termix-SSH/Termix/releases/tag/release-2.5.1-tag
• https://github.com/Termix-SSH/Termix/security/advisories/GHSA-x9h9-f7jc-8jwj
• https://github.com/Termix-SSH/Termix/security/advisories/GHSA-x9h9-f7jc-8jwj

Published

Sep 24, 2026

Last Modified

Sep 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-79758Termix is a web-based server management platform with SSH te…5.4
• CVE-2026-79759Termix is a web-based server management platform with SSH te…4.3
• CVE-2026-7976Use after free in Views in Google Chrome prior to 148.0.7778…7.5
• CVE-2026-79760Termix is a web-based server management platform with SSH te…6.4
• CVE-2026-79761Termix is a web-based server management platform with SSH te…6.6
• CVE-2026-79762Termix is a web-based server management platform with SSH te…5.5
• CVE-2026-79764Termix is a web-based server management platform with SSH te…7.7
• CVE-2026-79766Termix is a web-based server management platform with SSH te…9.1
• CVE-2026-79767Gardener implements the automated management and operation o…5.5
• CVE-2026-79769Nokogiri versions before 1.19.4 contain a possible invalid (…5.5
• CVE-2026-7977Inappropriate implementation in Canvas in Google Chrome prio…6.3
• CVE-2026-79770Nokogiri versions before 1.19.3 contain regular expression d…7.5