{"apiVersion":"1.0","identifier":"CVE-2026-53547","description":"Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. Prior to 2.3.2, the POST /database/export endpoint creates a user export that includes the global settings table even though the rest of the export is user-scoped. The settings table contains reset_code_ and temp_reset_token_ password-reset artifacts, allowing a low-privileged authenticated user to recover another local account-s reset code and complete the normal password-reset flow. Successful exploitation results in local-user account takeover and administrative compromise when the victim is an administrator. This issue is fixed in version 2.3.2.","publishedAt":"2026-08-19T21:16:56","lastModifiedAt":"2026-08-20T14:17:14","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-53547","cvssScore":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.004,"riskScore":0.91,"affectedProduct":"Termix","affectedVersions":"<2.3.2","vulnerabilityType":"Web app","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-53547","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-53547","en":"https://www.redsauce.net/en/cves/CVE-2026-53547","fr":"https://www.redsauce.net/fr/cves/CVE-2026-53547","pt":"https://www.redsauce.net/pt/cves/CVE-2026-53547","de":"https://www.redsauce.net/de/cves/CVE-2026-53547","sk":"https://www.redsauce.net/sk/cves/CVE-2026-53547","el":"https://www.redsauce.net/el/cves/CVE-2026-53547"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-53547"}}