Security Flaw in Termix Web-Based Server Management Platform

CVE-2026-53542

What is CVE-2026-53542?

The Termix web-based server management platform has a vulnerability in the archive creation functionality where selected file basenames can be misused. This occurs when the application passes these names to the tar command without the necessary end-of-options marker or ensuring their relative paths. Attackers with access to an SSH file-manager session can exploit this by entering filenames that resemble GNU tar options, leading to unauthorized command execution on the SSH host with high privileges. This flaw opens doors to potential file disclosures, modifications, and disruption of services, affecting users significantly. Version 2.3.2 has resolved this issue.

References