Electerm - vulnerabilities (CVEs)
17 CVEs in 1 products, 0 in the last 30 days, newest from 2026-08-19.
Products
- Electerm - 17 CVEs
Newest CVEs of Electerm
- CVE-2026-49253 - CVSS 7.1 (high), 2026-08-19: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm uses remote-supplied filenames directly…
- CVE-2026-49255 - CVSS 8.8 (high), 2026-08-19: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.11.11, electerm constructs operating system commands in…
- CVE-2026-73227 - CVSS 8.1 (high), 2026-08-11: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write…
- CVE-2026-73226 - CVSS 8.8 (high), 2026-08-11: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client…
- CVE-2026-73225 - CVSS 8.1 (high), 2026-08-11: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to…
- CVE-2026-73224 - CVSS 8.8 (high), 2026-08-11: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious FTP or SFTP server to…
- CVE-2026-73223 - CVSS 8.1 (high), 2026-08-11: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious SFTP server to write…
- CVE-2026-45353 - CVSS 9.3 (critical), 2026-05-28: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.
- CVE-2026-45787 - CVSS 9.1 (critical), 2026-05-28: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV,…
- CVE-2026-45058 - CVSS 9.4 (critical), 2026-05-28: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution…
- CVE-2026-43944 - CVSS 9.6 (critical), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to…
- CVE-2026-43940 - CVSS 8.4 (high), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in…
- CVE-2026-43943 - CVSS 7.8 (high), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists…
- CVE-2026-43942 - CVSS 5.5 (medium), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in…
- CVE-2026-43941 - CVSS 9.6 (critical), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler…
- CVE-2026-41501 - CVSS 9.8 (critical), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in…
- CVE-2026-41500 - CVSS 9.8 (critical), 2026-05-08: electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in…
