Skip to content
Eelecterm
Products
| Product | CVEs | Exploited | Latest |
| electerm | 18 | – | Sep 8, 2026 |
Exploited and recent CVEs
-
CVE-2026-86711
High 7.4
electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge
0.2%
-
CVE-2026-49253
High 7.1
electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling
0.4%
-
CVE-2026-49255
High 8.8
electerm: Command Injection in File System Operations (rmrf, mv, cp)
0.8%
-
CVE-2026-73227
High 8.1
electerm's RDP clipboard file download may parse unsafe file name
0.5%
-
CVE-2026-73226
High 8.8
Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist
0.8%
-
CVE-2026-73225
High 8.1
electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename
0.5%
-
CVE-2026-73224
High 8.8
Electerm check folder size function may get attacked by unsafe folder name
0.7%
-
CVE-2026-73223
High 8.1
electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename
0.5%
-
CVE-2026-45058
Critical 9.4
electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark
0.2%
-
CVE-2026-45353
Critical 9.3
electerm: Local code through electerm's single-instance socket
0.1%
-
CVE-2026-45787
Medium 6.0
electerm's encrypt method not safe enough
0.1%
-
CVE-2026-43944
Critical 9.4
electerm: dangerous code can be run through links or command line
0.4%
-
CVE-2026-43942
Medium 5.5
electerm: Full process.env exposed to renderer via window.pre.env in electerm
0.1%
-
CVE-2026-43941
Critical 9.6
Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click
0.4%
-
CVE-2026-43940
High 8.4
electerm: Path traversal in electerm runWidget leads to arbitrary code execution
0.2%
-
CVE-2026-43943
High 7.8
electerm: RCE via malicious SSH server filename in openFileWithEditor
0.2%
-
CVE-2026-41500
Critical 9.8
electerm has Command Injection Vulnerability via runMac function
1.6%
-
CVE-2026-41501
Critical 9.8
electerm has Command Injection Vulnerability via runLinux function
1.3%