Electerm vulnerabilities

Products

• Electerm 18

Newest

• electerm electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge CVE-2026-86711 7.5 HighSeptember 8, 2026
• electerm electerm's RDP clipboard file download may parse unsafe file name CVE-2026-73227 8.1 HighAugust 11, 2026
• electerm Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist CVE-2026-73226 8.8 HighAugust 11, 2026
• electerm electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename CVE-2026-73225 8.1 HighAugust 11, 2026
• electerm Electerm check folder size function may get attacked by unsafe folder name CVE-2026-73224 8.8 HighAugust 11, 2026
• electerm electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename CVE-2026-73223 8.1 HighAugust 11, 2026
• electerm electerm: Command Injection in File System Operations (rmrf, mv, cp) CVE-2026-49255 Fix available 8.8 HighJuly 2, 2026
• electerm electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling CVE-2026-49253 Fix available 7.1 HighJuly 2, 2026
• electerm electerm's encrypt method not safe enough CVE-2026-45787 Fix available 6.0 MediumMay 14, 2026
• electerm electerm: Local code through electerm's single-instance socket CVE-2026-45353 Fix available 9.3 CriticalMay 14, 2026
• electerm electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark CVE-2026-45058 9.4 CriticalMay 14, 2026
• electerm electerm: dangerous code can be run through links or command line CVE-2026-43944 Fix available 9.4 CriticalMay 8, 2026
• electerm electerm: Full process.env exposed to renderer via window.pre.env in electerm CVE-2026-43942 5.5 MediumMay 8, 2026
• electerm Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click CVE-2026-43941 9.6 CriticalMay 8, 2026
• electerm electerm: Path traversal in electerm runWidget leads to arbitrary code execution CVE-2026-43940 Fix available 8.4 HighMay 8, 2026
• electerm electerm: RCE via malicious SSH server filename in openFileWithEditor CVE-2026-43943 Fix available 7.8 HighMay 8, 2026
• electerm electerm has Command Injection Vulnerability via runLinux function CVE-2026-41501 Fix available 9.8 CriticalApril 24, 2026
• electerm electerm has Command Injection Vulnerability via runMac function CVE-2026-41500 Fix available 9.8 CriticalApril 16, 2026