CVE-2026-42452

The record

Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to version 2.1.0, /users/login issues a temporary JWT (temp_token) for TOTP-enabled accounts. That token carries a pendingTOTP state and should only be valid for the second-factor flow. However, the auth middleware accepts this token on regular authenticated endpoints. This effectively turns 2FA into single-factor (password) for impacted accounts. This issue has been patched in version 2.1.0.

Affected packages

Related vulnerabilities

• CVE-2023-54391 Proxmox Virtual Environment (VE) 7.0 through 8.0 contains an authentication bypass… CWE-304
• CVE-2026-76207 phpMyFAQ before 4.1.7 contains a two-factor authentication bypass vulnerability where… CWE-304
• CVE-2026-49467 Pingvin Share X is a secure and easy self-hosted file sharing platform. CWE-304
• CVE-2026-61143 Vulnerability in the Oracle Communications Convergent Charging Controller product of… CWE-304
• CVE-2026-57915 It is possible to bypass the Kerberos pre-authentication check in Apache Kerby by sending… CWE-304
• CVE-2026-44547 ChurchCRM is an open-source church management system. CWE-304
• CVE-2026-40542 Missing critical step in authentication in Apache HttpClient 5.6 allows an attacker to… CWE-304
• CVE-2026-30831 Rocket.Chat is an open-source, secure, fully customizable communications platform. CWE-304