Electerm Project

10 CVEs across 1 Electerm Project products. Browse Electerm Project vulnerabilities, severities, and proof-of-concept exploits.

Electerm Project products with known CVEs

ProductCVEs
Electerm10
Electerm Project CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45787Critical9.12026-05-28electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a fixed zero IV, const…
CVE-2026-45353High7.82026-05-28electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.
CVE-2026-43944Critical9.62026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is vulnerable to arbit…
CVE-2026-43943High7.82026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE) vulnerability exists i…
CVE-2026-43942Medium5.52026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants() IPC handler in src/a…
CVE-2026-43941Critical9.62026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler p…
CVE-2026-43940High8.42026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function in src/app/widgets/lo…
CVE-2026-41501Critical9.82026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in g…
CVE-2026-41500Critical9.82026-05-08electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in g…
CVE-2020-23256Critical9.82023-01-20An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.