electerm

Products

ProductCVEsExploitedLatest
electerm18–Sep 8, 2026

Exploited and recent CVEs

  • CVE-2026-86711 High 7.4 electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge 0.2%
  • CVE-2026-49253 High 7.1 electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling 0.4%
  • CVE-2026-49255 High 8.8 electerm: Command Injection in File System Operations (rmrf, mv, cp) 0.8%
  • CVE-2026-73227 High 8.1 electerm's RDP clipboard file download may parse unsafe file name 0.5%
  • CVE-2026-73226 High 8.8 Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist 0.8%
  • CVE-2026-73225 High 8.1 electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename 0.5%
  • CVE-2026-73224 High 8.8 Electerm check folder size function may get attacked by unsafe folder name 0.7%
  • CVE-2026-73223 High 8.1 electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename 0.5%
  • CVE-2026-45058 Critical 9.4 electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark 0.2%
  • CVE-2026-45353 Critical 9.3 electerm: Local code through electerm's single-instance socket 0.1%
  • CVE-2026-45787 Medium 6.0 electerm's encrypt method not safe enough 0.1%
  • CVE-2026-43944 Critical 9.4 electerm: dangerous code can be run through links or command line 0.4%
  • CVE-2026-43942 Medium 5.5 electerm: Full process.env exposed to renderer via window.pre.env in electerm 0.1%
  • CVE-2026-43941 Critical 9.6 Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click 0.4%
  • CVE-2026-43940 High 8.4 electerm: Path traversal in electerm runWidget leads to arbitrary code execution 0.2%
  • CVE-2026-43943 High 7.8 electerm: RCE via malicious SSH server filename in openFileWithEditor 0.2%
  • CVE-2026-41500 Critical 9.8 electerm has Command Injection Vulnerability via runMac function 1.6%
  • CVE-2026-41501 Critical 9.8 electerm has Command Injection Vulnerability via runLinux function 1.3%