Electerm

This hub aggregates every CVE we track for Electerm, a product in the oss libraries space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 15 most recently published vulnerabilities affecting Electerm.

• CVE-2026-49253electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling7.1Aug 19, 2026
• CVE-2026-49255electerm: Command Injection in File System Operations (rmrf, mv, cp)8.8Aug 19, 2026
• CVE-2026-73227electerm's RDP clipboard file download may parse unsafe file name8.1Aug 11, 2026
• CVE-2026-73226Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist8.8Aug 11, 2026
• CVE-2026-73225electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename8.1Aug 11, 2026
• CVE-2026-73224Electerm check folder size function may get attacked by unsafe folder name8.8Aug 11, 2026
• CVE-2026-73223electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename8.1Aug 11, 2026
• CVE-2026-45353electerm: Local code through electerm's single-instance socket7.8May 28, 2026
• CVE-2026-45787electerm's encrypt method not safe enough9.1May 28, 2026
• CVE-2026-43944electerm: dangerous code can be run through links or command line9.6May 8, 2026
• CVE-2026-43942electerm: Full process.env exposed to renderer via window.pre.env in electerm5.5May 8, 2026
• CVE-2026-43941Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click9.6May 8, 2026
• CVE-2026-43940electerm: Path traversal in electerm runWidget leads to arbitrary code execution8.4May 8, 2026
• CVE-2026-43943electerm: RCE via malicious SSH server filename in openFileWithEditor7.8May 8, 2026
• CVE-2026-41500electerm has Command Injection Vulnerability via runMac function9.8May 8, 2026