CVE-2026-79763

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-79763
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79763.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-79763
Aliases
  • GHSA-x9h9-f7jc-8jwj
Published
2026-09-24T16:06:16Z
Modified
2026-09-26T03:47:43Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N CVSS Calculator
Summary
Termix: MFA-critical operations accept the account password as a sole factor (regression of CVE-2026-45749)
Details

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.0 until 2.5.1, the POST /users/totp/disable and POST /users/totp/backup-codes endpoints accept the account password as the sole reauthentication factor after a 2.4.0 refactor regressed the two-factor check introduced for CVE-2026-45749. In src/backend/database/routes/user-totp-routes.ts, verifyTotpReauth returns success when bcrypt.compare validates the password, while each endpoint chooses password or totp_code as an interchangeable credential. An attacker who has a victim's authenticated session and knows the password can disable TOTP or regenerate and invalidate backup codes without an authenticator or valid second factor, weakening the account to single-factor authentication. This issue is fixed in version 2.5.1.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-308"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/79xxx/CVE-2026-79763.json"
}
References

Affected packages

Git / github.com/termix-ssh/termix

Affected ranges

Type
GIT
Repo
https://github.com/termix-ssh/termix
Events
Introduced
ac24fdcba8c6f00b4945b61b7a15efe152556e5e
Fixed
22124e1bc49c8cedad57b31de9c51ad39f3d4432
Fixed
ddbdd5c437c2296607dfaa4265d6f63fbc1ca92e
Database specific
Show details 
{
    "extracted_events":  [
        {
            "introduced":  "2.4.0"
        },
        {
            "fixed":  "2.5.1"
        }
    ],
    "source":  [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

release-2.*
release-2.4.0-tag
release-2.4.1-tag
release-2.5.0-tag

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-79763.json"