electerm project records
10 published records for vendor electerm project.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 70%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-306 Missing Authentication for Critical Function1
- CWE-326 Inadequate Encryption Strength1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
10 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2026-41500No exploit | electerm has Command Injection Vulnerability via runMac functionelecterm project · electerm · CWE-77 | Critical9.8 | — | 2.4% | May 8, 2026 |
40Plan | CVE-2026-41501No exploit | electerm has Command Injection Vulnerability via runLinux functionelecterm project · electerm · CWE-77 | Critical9.8 | — | 2.4% | May 8, 2026 |
39Monitor | CVE-2020-23256No exploit | An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.electerm project · electerm · CWE-306 | Critical9.8 | — | 0.8% | Jan 20, 2023 |
38Monitor | CVE-2026-43941No exploit | Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link clickelecterm project · electerm · CWE-88 | Critical9.6 | — | 0.5% | May 8, 2026 |
37Monitor | CVE-2026-43944No exploit | electerm: dangerous code can be run through links or command lineelecterm project · electerm · CWE-20 | Critical9.4 | — | 0.6% | May 8, 2026 |
37Monitor | CVE-2026-45353No exploit | electerm: Local code through electerm's single-instance socketelecterm project · electerm · CWE-94 | Critical9.3 | — | 0.1% | May 28, 2026 |
33Monitor | CVE-2026-43940No exploit | electerm: Path traversal in electerm runWidget leads to arbitrary code executionelecterm project · electerm · CWE-22 | High8.4 | — | 0.2% | May 8, 2026 |
31Monitor | CVE-2026-43943No exploit | electerm: RCE via malicious SSH server filename in openFileWithEditorelecterm project · electerm · CWE-78 | High7.8 | — | 0.2% | May 8, 2026 |
24Monitor | CVE-2026-45787No exploit | electerm's encrypt method not safe enoughelecterm project · electerm · CWE-326 | Medium6.0 | — | 0.1% | May 28, 2026 |
22Monitor | CVE-2026-43942No exploit | electerm: Full process.env exposed to renderer via window.pre.env in electermelecterm project · electerm · CWE-200 | Medium5.5 | — | 0.1% | May 8, 2026 |
- CVE-2026-4150040Plan
electerm has Command Injection Vulnerability via runMac function
CriticalCVSS 9.8No exploitEPSS 2%electerm project · electermMay 8, 2026
- CVE-2026-4150140Plan
electerm has Command Injection Vulnerability via runLinux function
CriticalCVSS 9.8No exploitEPSS 2%electerm project · electermMay 8, 2026
- CVE-2020-2325639Monitor
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
CriticalCVSS 9.8No exploitEPSS 0%electerm project · electermJan 20, 2023
- CVE-2026-4394138Monitor
Unvalidated shell.openExternal in electerm allows arbitrary protocol execution via terminal link click
CriticalCVSS 9.6No exploitEPSS 0%electerm project · electermMay 8, 2026
- CVE-2026-4394437Monitor
electerm: dangerous code can be run through links or command line
CriticalCVSS 9.4No exploitEPSS 0%electerm project · electermMay 8, 2026
- CVE-2026-4535337Monitor
electerm: Local code through electerm's single-instance socket
CriticalCVSS 9.3No exploitEPSS 0%electerm project · electermMay 28, 2026
- CVE-2026-4394033Monitor
electerm: Path traversal in electerm runWidget leads to arbitrary code execution
HighCVSS 8.4No exploitEPSS 0%electerm project · electermMay 8, 2026
- CVE-2026-4394331Monitor
electerm: RCE via malicious SSH server filename in openFileWithEditor
HighCVSS 7.8No exploitEPSS 0%electerm project · electermMay 8, 2026
- CVE-2026-4578724Monitor
electerm's encrypt method not safe enough
MediumCVSS 6.0No exploitEPSS 0%electerm project · electermMay 28, 2026
- CVE-2026-4394222Monitor
electerm: Full process.env exposed to renderer via window.pre.env in electerm
MediumCVSS 5.5No exploitEPSS 0%electerm project · electermMay 8, 2026