Technology · npm
electerm (npm) vulnerabilities
Updated . Rebuilt every hour.
Junglewise Threat Intelligence has tracked 19 vulnerabilities in electerm (npm): 0 in the last 7 days and 3 in the last 90 days, 6 of them critical and 0 exploited in the wild. The most recent, CVE-2026-86711, was published on 8 September 2026. Nothing was published in the last eight weeks.
- Last 7 days
- 0
- Last 90 days
- 3
- Critical, all time
- 6
- Exploited in the wild
- 0
About electerm (npm)
Terminal emulator and SSH client providing remote shell access and file transfer capabilities.
Latest electerm (npm) vulnerabilities
- CVE-2026-86711: electerm IPC handler privilege escalation in main processhighCVSS 7.4EPSS 0.2%
- CVE-2026-49255: electerm OS command injection in file system operationshighCVSS 8.8EPSS 0.8%
- CVE-2026-49253: electerm path traversal in Zmodem and Trzsz download handlershighCVSS 7.1EPSS 0.4%
- CVE-2026-73227: electerm unsafe RDP filename in clipboard downloadhighCVSS 8.1EPSS 0.5%
- CVE-2026-73226: electerm authenticated method invocation vulnerabilityhighCVSS 8.8EPSS 0.8%
- CVE-2026-73225: electerm path traversal in FTP/SFTP file transferhighCVSS 8.1EPSS 0.5%
- CVE-2026-73224: electerm shell injection in folder size calculationhighCVSS 8.8EPSS 0.7%
- CVE-2026-73223: electerm path traversal via unsanitized SFTP filenamehighCVSS 8.1EPSS 0.5%
- CVE-2026-45787: electerm weak encryption in synced profile datamediumCVSS 4EPSS 0.1%
- CVE-2026-45353: electerm local code execution via single-instance sockethighCVSS 7.8EPSS 0.2%
- CVE-2026-45058: electerm code execution via imported bookmarks or sync targetscriticalCVSS 4EPSS 0.3%
- CVE-2026-43944: electerm code execution via deep links or CLI optionscriticalCVSS 9.6EPSS 0.7%
- CVE-2026-43943: Electerm command injection in openFileWithEditor via malicious SSH filenamehighCVSS 7.8EPSS 0.2%
- CVE-2026-43942: Electerm sensitive information exposure in renderer via window.pre.envmediumCVSS 5.5EPSS 0.1%
- CVE-2026-43941: Electerm unvalidated shell.openExternal arbitrary protocol executioncriticalCVSS 9.6EPSS 0.4%
- CVE-2026-43940: Electerm runWidget path traversal leading to code executionhighCVSS 8.4EPSS 0.2%
- CVE-2026-41501: electerm command injection in runLinux functioncriticalCVSS 9.8EPSS 1.3%
- CVE-2026-41500: electerm: electerm_install_script_CommandInjection Vulnerability ReportcriticalCVSS 9.8EPSS 1.6%
- CVE-2020-23256: Electerm OS command injection via unverified service requestcriticalCVSS 9.8EPSS 0.9%
Most severe electerm (npm) vulnerabilities
Exploited in the wild first, then by severity and CVSS score.
- CVE-2026-41500: electerm: electerm_install_script_CommandInjection Vulnerability ReportcriticalCVSS 9.8EPSS 1.6%
- CVE-2026-41501: electerm command injection in runLinux functioncriticalCVSS 9.8EPSS 1.3%
- CVE-2020-23256: Electerm OS command injection via unverified service requestcriticalCVSS 9.8EPSS 0.9%
- CVE-2026-43944: electerm code execution via deep links or CLI optionscriticalCVSS 9.6EPSS 0.7%
- CVE-2026-43941: Electerm unvalidated shell.openExternal arbitrary protocol executioncriticalCVSS 9.6EPSS 0.4%
- CVE-2026-45058: electerm code execution via imported bookmarks or sync targetscriticalCVSS 4EPSS 0.3%
- CVE-2026-49255: electerm OS command injection in file system operationshighCVSS 8.8EPSS 0.8%
- CVE-2026-73226: electerm authenticated method invocation vulnerabilityhighCVSS 8.8EPSS 0.8%
- CVE-2026-73224: electerm shell injection in folder size calculationhighCVSS 8.8EPSS 0.7%
- CVE-2026-43940: Electerm runWidget path traversal leading to code executionhighCVSS 8.4EPSS 0.2%
Vulnerabilities per week
Nothing was published in the last eight weeks. The last 13 weeks, by the week each vulnerability was published.
| Week of | Bar | Vulns | Critical |
|---|---|---|---|
| 17 Aug 2026 | 2 | 0 | |
| 24 Aug 2026 | 0 | 0 | |
| 31 Aug 2026 | 0 | 0 | |
| 7 Sep 2026 | 1 | 0 | |
| 14 Sep 2026 | 0 | 0 | |
| 21 Sep 2026 | 0 | 0 | |
| 28 Sep 2026 | 0 | 0 | |
| 5 Oct 2026 | 0 | 0 | |
| 12 Oct 2026 | 0 | 0 | |
| 19 Oct 2026 | 0 | 0 | |
| 26 Oct 2026 | 0 | 0 | |
| 2 Nov 2026 | 0 | 0 | |
| 9 Nov 2026 | 0 | 0 |
Embed a badge
A live badge for a README, a status page or an internal wiki: how many electerm (npm) vulnerabilities were published in the last 7 days and how many of them are critical, refreshed hourly.
[](https://junglewise.ai/threats/technologies/electerm)<a href="https://junglewise.ai/threats/technologies/electerm"><img src="https://junglewise.ai/threats/technologies/electerm/badge.svg" alt="electerm (npm) vulnerabilities" /></a>How this is built
Junglewise Threat Intelligence collects vulnerabilities from NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories, and matches each one to the technologies and vendors it affects. Dates are the date a vulnerability was published, in UTC.
The pages are rebuilt from the database every hour. Frozen weekly and monthly reports never change once published, so they can be cited.
Use this data
The same data is at https://junglewise.ai/threats/technologies/electerm.json, and this page as text at https://junglewise.ai/threats/technologies/electerm.md, for scripts and language models. It is free to reuse under CC BY 4.0 with a link back to this page.
Cite as: Junglewise Threat Intelligence, "electerm (npm) vulnerabilities", https://junglewise.ai/threats/technologies/electerm, 13 November 2026.