What’s Vulnerable › Products
electerm vulnerabilities
19 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.
Check whether your electerm version is affected
Latest electerm vulnerabilities
- CVE-2026-86711 — electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge (CVSS 7.4)
- CVE-2026-49255 — electerm: Command Injection in File System Operations (rmrf, mv, cp) (CVSS 8.8)
- CVE-2026-49253 — electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling (CVSS 7.1)
- CVE-2026-73227 — electerm's RDP clipboard file download may parse unsafe file name (CVSS 8.1)
- CVE-2026-73226 — Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist (CVSS 8.8)
- CVE-2026-73225 — electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename (CVSS 8.1)
- CVE-2026-73224 — Electerm check folder size function may get attacked by unsafe folder name (CVSS 8.8)
- CVE-2026-73223 — electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename (CVSS 8.1)
- CVE-2026-45787 — electerm's encrypt method not safe enough (CVSS 9.1)
- CVE-2026-45353 — electerm: Local code through electerm's single-instance socket (CVSS 7.8)
- CVE-2026-45058 — electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark (CVSS 9.4)
- CVE-2026-43944 — electerm: dangerous code can be run through links or command line (CVSS 9.6)
- CVE-2026-43943 — electerm: RCE via malicious SSH server filename in openFileWithEditor (CVSS 7.8)
- CVE-2026-43942 — electerm: Full process.env exposed to renderer via window.pre.env in electerm (CVSS 5.5)
- CVE-2026-43941 — Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click (CVSS 9.6)
- CVE-2026-43940 — electerm: Path traversal in electerm runWidget leads to arbitrary code execution (CVSS 8.4)
- CVE-2026-41501 — electerm has Command Injection Vulnerability via runLinux function (CVSS 9.8)
- CVE-2026-41500 — electerm has Command Injection Vulnerability via runMac function (CVSS 9.8)
- CVE-2020-23256 — (CVSS 9.8)