{"vulnerability": "CVE-2026-5354", "sightings": [{"uuid": "86df661a-ce70-4931-82d4-3fd2d938ead0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-5354", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mijupvycp32g", "content": "", "creation_timestamp": "2026-04-02T18:50:15.245263Z"}, {"uuid": "e1a34355-7a4f-4dab-a1eb-c29c081e9c22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53548", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjbuq6j3g2p", "content": "CVE-2026-53548\nThe Termix server\u2011management tool (versions before 2.6.1) lets anyone who is signed in request password data for a host just by guessing the host\u2019s numeric identifier. This lets a user obtain the remote\u2011access\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T12:50:04.023003Z"}, {"uuid": "d2731e7a-b898-4a06-a803-7e47586f4d12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53546", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjbuqoshx2m", "content": "CVE-2026-53546\nIn versions of Termix before 2.3.2, a regular user can trick the system into connecting to an attacker\u2011controlled remote server. When this occurs, the system may expose another user's saved password or private\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T12:50:04.653020Z"}, {"uuid": "3947a414-8d3e-436e-bd85-d2199878ab80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53545", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mtjcgnbdai23", "content": "CVE-2026-53545\nTermix versions before 2.3.2 let a signed\u2011in user who can change a tunnel\u2019s host field add extra commands that run when the tunnel is closed. That means the user could make the server execute any command they\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-20T13:00:04.694117Z"}, {"uuid": "e4fd7fcb-3116-4335-b1c1-69b04dcaf48c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2026-53541", "type": "published-proof-of-concept", "source": "https://github.com/OliveTin/OliveTin/security/advisories/GHSA-prj9-97mp-mwh2", "content": "", "creation_timestamp": "2026-06-24T18:35:02.792967Z"}, {"uuid": "2763e929-c377-4888-b6c5-c244a128e141", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53548", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthqtcan4p2t", "content": "\ud83d\udea8 CVE-2026-53548 \u2014 CVSS 9.6 CRITICAL\n\nTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilitie...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-53548\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T22:12:22.056057Z"}, {"uuid": "29c149ff-2164-48e0-bb25-38c1d44bbad0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53545", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthqss3ovw2j", "content": "\ud83d\udea8 CVE-2026-53545 \u2014 CVSS 9.8 CRITICAL\n\nTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilitie...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-53545\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T22:12:05.164434Z"}, {"uuid": "72040bd0-2026-4d67-9f3b-a3d3a3ff1581", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53546", "type": "seen", "source": "https://bsky.app/profile/stemshop.bsky.social/post/3mthqszzlrh2u", "content": "\ud83d\udea8 CVE-2026-53546 \u2014 CVSS 9.6 CRITICAL\n\nTermix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilitie...\n\n\ud83d\udd0e https://stemshop.top/cve/CVE-2026-53546\n\n#CVE #CyberSecurity #InfoSec", "creation_timestamp": "2026-08-19T22:12:13.660524Z"}, {"uuid": "e079c12b-dd76-4cda-b758-1f3a62518c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53548", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mti7a4smli2e", "content": "CVE-2026-53548 - termix\nA security flaw in Termix allows an authenticated user to access and steal the SSH passwords of other users. This could be used to gain unauthorized access to servers managed by\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#termix #termixssh #CVE #infosec", "creation_timestamp": "2026-08-20T02:30:05.094367Z"}, {"uuid": "322df833-d9b4-4a08-a4ae-2947c641ba8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53546", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mti7ryfmau24", "content": "CVE-2026-53546 - termix\nTermix's SSH feature allows a low-privileged user to access another user's stored SSH password or private key if they know the correct SSH host ID. This could lead to unauthorized\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#termix #termixssh #CVE #infosec", "creation_timestamp": "2026-08-20T02:40:04.693636Z"}, {"uuid": "c290db63-04b3-4fc4-bd98-a508fb4a0c37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53545", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mti7rzmtqz2u", "content": "CVE-2026-53545 - termix\nTermix's tunnel management feature allows an attacker to execute arbitrary commands on the SSH host with the connected account's privileges when a tunnel is disconnected. This could\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#termix #termixssh #CVE #infosec", "creation_timestamp": "2026-08-20T02:40:05.662555Z"}, {"uuid": "729d5441-1464-4d23-a11f-1a2768d96453", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53545", "type": "published-proof-of-concept", "source": "Telegram/87w5sTCGBPeMw8h3c2UBbBkEJEq_eSW1iUUA_ENsR3qsz5w", "content": "", "creation_timestamp": "2026-08-21T00:00:08.131185Z"}, {"uuid": "108403c7-223d-40be-a8d2-1b0f6bec04b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53547", "type": "seen", "source": "https://t.me/GithubRedTeam/95752", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Termix-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a GabrielHA12\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 21:15:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-45746, CVE-2026-45750, CVE-2026-53547 \u2014 three critical vulnerabilities in Termix: cross-tenant session hijacking, OS command injection, and account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-29T23:00:03.404506Z"}, {"uuid": "f31805e0-5da7-4137-8c1f-d758158b2697", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53547", "type": "seen", "source": "https://t.me/GithubRedTeam/95752", "content": "\ud83d\udea8 GitHub \u76d1\u63a7\u6d88\u606f\u63d0\u9192\n\n\ud83d\udea8 \u53d1\u73b0\u5173\u952e\u8bcd\uff1a #CVE-2026 #RCE\n\n\ud83d\udce6 \u9879\u76ee\u540d\u79f0\uff1a Termix-research\n\ud83d\udc64 \u9879\u76ee\u4f5c\u8005\uff1a GabrielHA12\n\ud83d\udee0 \u5f00\u53d1\u8bed\u8a00\uff1a Unknown\n\u2b50 Star\u6570\u91cf\uff1a 0  |  \ud83c\udf74 Fork\u6570\u91cf\uff1a 0\n\ud83d\udcc5 \u66f4\u65b0\u65f6\u95f4\uff1a 2026-07-29 21:15:43\n\n\ud83d\udcdd \u9879\u76ee\u63cf\u8ff0\uff1a\nCVE-2026-45746, CVE-2026-45750, CVE-2026-53547 \u2014 three critical vulnerabilities in Termix: cross-tenant session hijacking, OS command injection, and account takeover\n\n\ud83d\udd17 \u70b9\u51fb\u8bbf\u95ee\u9879\u76ee\u5730\u5740", "creation_timestamp": "2026-07-30T00:00:05.002352Z"}, {"uuid": "a203d4fe-1fcb-434f-b21e-6cac9ddf2b2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53546", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfcylzrh22c", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-53546: Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-53546\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T09:49:51.567699Z"}, {"uuid": "11ee10a8-7069-4723-83de-fbae8357f2ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-53546", "type": "seen", "source": "https://bsky.app/profile/vulnsea.com/post/3mvfgfhkcpq2p", "content": "\ud83c\udf0a ABYSSAL \u00b7 critical with a public exploit\nCVE-2026-53546: Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities\nCVSS 9.6\nhttps://beta.vulnsea.com/cve/CVE-2026-53546\n\n#CVE #infosec #cybersecurity #threatintel", "creation_timestamp": "2026-09-13T10:50:44.303344Z"}]}