Electerm Project Electerm — known CVE vulnerabilities

Every CVE whose affected-product data names Electerm Project Electerm, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2026-41500 — CVSS 9.8 (critical): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection…
• CVE-2026-41501 — CVSS 9.8 (critical): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection…
• CVE-2020-23256 — CVSS 9.8 (critical): An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary code via unverified request to electerms service.
• CVE-2026-43944 — CVSS 9.6 (critical): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From versions 3.0.6 to before 3.8.15, electerm is…
• CVE-2026-43941 — CVSS 9.6 (critical): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal…
• CVE-2026-45787 — CVSS 9.1 (critical): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.9.5, deterministic AES-192-CBC with a…
• CVE-2026-43940 — CVSS 8.4 (high): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.16, the runWidget function…
• CVE-2026-43943 — CVSS 7.8 (high): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.7.9, a code execution (RCE)…
• CVE-2026-45353 — CVSS 7.8 (high): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed…
• CVE-2026-43942 — CVSS 5.5 (medium): electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, the getConstants()…