Description
An issue was discovered in Electerm 1.3.22, allows attackers to execute arbitrary commands via unverified request to electerms service.
Recommendation
No fix is available yet. Followings are affected versions:
- <= 1.3.22
References
Could your website be exposed too?
SmartScanner can check your website for electerm allows unauthorized users to execute arbitrary commands and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Electerm has an unvalidated shell.openExternal that allows arbitrary protocol execution via terminal link click - CVE-2026-43941
- Saltcorn Server allows logged-in users to delete arbitrary files because of a path traversal vulnerability - CVE-2024-47818
- Electerm runWidget has a path traversal that leads to arbitrary code execution - CVE-2026-43940
- Plate allows arbitrary DOM attributes in element.attributes and leaf.attributes - CVE-2024-47061
You might also like:
See something that needs correcting? Let us knowUpdated May 20, 2026