{"schema_version":1,"title":"Electerm Project vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 7 vulnerabilities in Electerm Project: 0 in the last 7 days and 0 in the last 90 days, 4 of them critical and 0 exploited in the wild. The most recent, CVE-2026-43944, was published on 8 May 2026. 1 technology has a page of its own.","url":"https://junglewise.ai/threats/vendors/electerm-project","json_url":"https://junglewise.ai/threats/vendors/electerm-project.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/vendors/electerm-project","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"vendor","thin":false,"counts":{"high":2,"all_time":7,"critical":4,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":0,"last_365_days":7},"latest":[{"cve":"CVE-2026-43944","cvss":9.6,"epss":0.0065,"slug":"cve-2026-43944-electerm-arbitrary-code-execution-via-deep-links-or-cli-options","title":"electerm code execution via deep links or CLI options","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:24.033+00:00","url":"https://junglewise.ai/threats/cve-2026-43944-electerm-arbitrary-code-execution-via-deep-links-or-cli-options"},{"cve":"CVE-2026-43943","cvss":7.8,"epss":0.0017,"slug":"cve-2026-43943-electerm-command-injection-in-openfilewitheditor-via-malicious","title":"Electerm command injection in openFileWithEditor via malicious SSH filename","severity":"high","exploited":false,"published_at":"2026-05-08T04:16:23.837+00:00","url":"https://junglewise.ai/threats/cve-2026-43943-electerm-command-injection-in-openfilewitheditor-via-malicious"},{"cve":"CVE-2026-43942","cvss":5.5,"epss":0.001,"slug":"cve-2026-43942-electerm-sensitive-information-exposure-via-process-env-in","title":"Electerm sensitive information exposure in renderer via window.pre.env","severity":"medium","exploited":false,"published_at":"2026-05-08T04:16:23.64+00:00","url":"https://junglewise.ai/threats/cve-2026-43942-electerm-sensitive-information-exposure-via-process-env-in"},{"cve":"CVE-2026-43941","cvss":9.6,"epss":0.0039,"slug":"cve-2026-43941-electerm-unvalidated-shell-openexternal-arbitrary-protocol","title":"Electerm unvalidated shell.openExternal arbitrary protocol execution","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:23.26+00:00","url":"https://junglewise.ai/threats/cve-2026-43941-electerm-unvalidated-shell-openexternal-arbitrary-protocol"},{"cve":"CVE-2026-43940","cvss":8.4,"epss":0.0017,"slug":"cve-2026-43940-electerm-runwidget-path-traversal-leading-to-code-execution","title":"Electerm runWidget path traversal leading to code execution","severity":"high","exploited":false,"published_at":"2026-05-08T04:16:23.023+00:00","url":"https://junglewise.ai/threats/cve-2026-43940-electerm-runwidget-path-traversal-leading-to-code-execution"},{"cve":"CVE-2026-41501","cvss":9.8,"epss":0.0129,"slug":"cve-2026-41501-electerm-command-injection-in-runlinux-function","title":"electerm command injection in runLinux function","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:17.94+00:00","url":"https://junglewise.ai/threats/cve-2026-41501-electerm-command-injection-in-runlinux-function"},{"cve":"CVE-2026-41500","cvss":9.8,"epss":0.0157,"slug":"cve-2026-41500-electerm-electerm-install-script-commandinjection-vulnerability","title":"electerm: electerm_install_script_CommandInjection Vulnerability Report","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:17.72+00:00","url":"https://junglewise.ai/threats/cve-2026-41500-electerm-electerm-install-script-commandinjection-vulnerability"}],"vendor":{"hub":true,"name":"Electerm Project","slug":"electerm-project","description":"Project that develops and maintains the Electerm terminal emulation software.","url":"https://junglewise.ai/threats/vendors/electerm-project"},"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"most_severe":[{"cve":"CVE-2026-41500","cvss":9.8,"epss":0.0157,"slug":"cve-2026-41500-electerm-electerm-install-script-commandinjection-vulnerability","title":"electerm: electerm_install_script_CommandInjection Vulnerability Report","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:17.72+00:00","url":"https://junglewise.ai/threats/cve-2026-41500-electerm-electerm-install-script-commandinjection-vulnerability"},{"cve":"CVE-2026-41501","cvss":9.8,"epss":0.0129,"slug":"cve-2026-41501-electerm-command-injection-in-runlinux-function","title":"electerm command injection in runLinux function","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:17.94+00:00","url":"https://junglewise.ai/threats/cve-2026-41501-electerm-command-injection-in-runlinux-function"},{"cve":"CVE-2026-43944","cvss":9.6,"epss":0.0065,"slug":"cve-2026-43944-electerm-arbitrary-code-execution-via-deep-links-or-cli-options","title":"electerm code execution via deep links or CLI options","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:24.033+00:00","url":"https://junglewise.ai/threats/cve-2026-43944-electerm-arbitrary-code-execution-via-deep-links-or-cli-options"},{"cve":"CVE-2026-43941","cvss":9.6,"epss":0.0039,"slug":"cve-2026-43941-electerm-unvalidated-shell-openexternal-arbitrary-protocol","title":"Electerm unvalidated shell.openExternal arbitrary protocol execution","severity":"critical","exploited":false,"published_at":"2026-05-08T04:16:23.26+00:00","url":"https://junglewise.ai/threats/cve-2026-43941-electerm-unvalidated-shell-openexternal-arbitrary-protocol"},{"cve":"CVE-2026-43940","cvss":8.4,"epss":0.0017,"slug":"cve-2026-43940-electerm-runwidget-path-traversal-leading-to-code-execution","title":"Electerm runWidget path traversal leading to code execution","severity":"high","exploited":false,"published_at":"2026-05-08T04:16:23.023+00:00","url":"https://junglewise.ai/threats/cve-2026-43940-electerm-runwidget-path-traversal-leading-to-code-execution"},{"cve":"CVE-2026-43943","cvss":7.8,"epss":0.0017,"slug":"cve-2026-43943-electerm-command-injection-in-openfilewitheditor-via-malicious","title":"Electerm command injection in openFileWithEditor via malicious SSH filename","severity":"high","exploited":false,"published_at":"2026-05-08T04:16:23.837+00:00","url":"https://junglewise.ai/threats/cve-2026-43943-electerm-command-injection-in-openfilewitheditor-via-malicious"},{"cve":"CVE-2026-43942","cvss":5.5,"epss":0.001,"slug":"cve-2026-43942-electerm-sensitive-information-exposure-via-process-env-in","title":"Electerm sensitive information exposure in renderer via window.pre.env","severity":"medium","exploited":false,"published_at":"2026-05-08T04:16:23.64+00:00","url":"https://junglewise.ai/threats/cve-2026-43942-electerm-sensitive-information-exposure-via-process-env-in"}],"generated_at":"2026-11-12T03:07:00.164048+00:00","technologies":[{"name":"Electerm Project Electerm","slug":"electerm-project-electerm","vulnerabilities":6,"url":"https://junglewise.ai/threats/technologies/electerm-project-electerm"}]}