electerm vulnerabilities

Newest CVEs

• CVE-2026-86711

  electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge

  electerm · electerm

  High7.5
• CVE-2026-49253

  electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling

  electerm · electerm

  High7.1
• CVE-2026-49255

  electerm: Command Injection in File System Operations (rmrf, mv, cp)

  electerm · electerm

  High8.8
• CVE-2026-73227

  electerm's RDP clipboard file download may parse unsafe file name

  electerm · electerm

  High8.1
• CVE-2026-73226

  Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist

  electerm · electerm

  High8.8
• CVE-2026-73225

  electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename

  electerm · electerm

  High8.1
• CVE-2026-73224

  Electerm check folder size function may get attacked by unsafe folder name

  electerm · electerm

  High8.8
• CVE-2026-73223

  electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename

  electerm · electerm

  High8.1
• CVE-2026-45058

  electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark

  electerm · electerm

  Critical9.4
• CVE-2026-45353

  electerm: Local code through electerm's single-instance socket

  electerm · electerm

  Critical9.3