Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

electerm — Vulnerabilities & Security Advisories 18

Browse all 18 CVE security advisories affecting electerm. AI-powered Chinese analysis, POCs, and references for each vulnerability.

This page aggregates security vulnerabilities associated with the Electerm terminal client, focusing on software weaknesses and their specific tags. It collects reported security flaws affecting the application across its various release cycles, covering a broad time range from initial public disclosures to recent updates. Readers can use this resource to track the vendor's security advisories, understand specific weakness classes impacting terminal emulators, and review the product's historical vulnerability profile. The data is organized to facilitate analysis of how Electerm addresses security issues over time, providing a consolidated view for researchers and developers. By examining the aggregated entries, users can identify patterns in reported defects, assess the frequency of security patches, and evaluate the overall stability of the software. This collection serves as a reference point for understanding the security posture of Electerm without requiring navigation through multiple disparate sources. The entries are categorized by vulnerability type and affected version, allowing for targeted investigation into specific risk areas such as remote code execution or information disclosure. This structured approach supports informed decision-making regarding software usage and security monitoring practices for organizations relying on Electerm.

Top products by electerm: electerm
CVE ID Title CVSS Severity Published
CVE-2026-86711 electerm before 5.3.15 Arbitrary Command Execution via Unvalidated runGlobalAsync IPC Bridge — electerm CWE-749 7.4 High 2026-09-08
CVE-2026-49253 electerm: Path Traversal in Zmodem and Trzsz Download Filename Handling — electerm CWE-22 7.1 High 2026-08-19
CVE-2026-49255 electerm: Command Injection in File System Operations (rmrf, mv, cp) — electerm CWE-78 8.8 High 2026-08-19
CVE-2026-73227 electerm's RDP clipboard file download may parse unsafe file name — electerm CWE-22 8.1 High 2026-08-11
CVE-2026-73226 Electerm WebSocket `upgrade-func` and `fs` handlers allow arbitrary method/function invocation due to missing method-name allowlist — electerm CWE-913 8.8 High 2026-08-11
CVE-2026-73225 electerm: Path traversal in FTP/SFTP recursive folder download via unsanitized server filename — electerm CWE-22 8.1 High 2026-08-11
CVE-2026-73224 Electerm check folder size function may get attacked by unsafe folder name — electerm CWE-78 8.8 High 2026-08-11
CVE-2026-73223 electerm: Path traversal in editWithSystemEditor temp file path via unsanitized SFTP filename — electerm CWE-22 8.1 High 2026-08-11
CVE-2026-45058 electerm: Import unsafe bookmark data could lead to unsafe operation when click local type bookmark — electerm CWE-94 - - 2026-05-28
CVE-2026-45353 electerm: Local code through electerm's single-instance socket — electerm CWE-94 - - 2026-05-28
CVE-2026-45787 electerm's encrypt method not safe enough — electerm CWE-326 - - 2026-05-28
CVE-2026-43944 electerm: dangerous code can be run through links or command line — electerm CWE-20 8.0AI High AI 2026-05-08
CVE-2026-43942 electerm: Full process.env exposed to renderer via window.pre.env in electerm — electerm CWE-200 5.5 Medium 2026-05-08
CVE-2026-43941 Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click — electerm CWE-88 9.6 Critical 2026-05-08
CVE-2026-43940 electerm: Path traversal in electerm runWidget leads to arbitrary code execution — electerm CWE-22 8.4 High 2026-05-08
CVE-2026-43943 electerm: RCE via malicious SSH server filename in openFileWithEditor — electerm CWE-78 7.8 High 2026-05-08
CVE-2026-41500 electerm has Command Injection Vulnerability via runMac function — electerm CWE-77 9.8 Critical 2026-05-08
CVE-2026-41501 electerm has Command Injection Vulnerability via runLinux function — electerm CWE-77 9.8 Critical 2026-05-08

This page lists every published CVE security advisory associated with electerm. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.