CVE-2026-45353: Electerm Project Electerm

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. From 3.0.6 to 3.8.8, This vulnerability is fixed in 3.9.0.

Affected products

• Electerm Project Electerm: from 3.0.6, before 3.9.0 (fixed in 3.9.0)

Published 2026-05-28. Last modified 2026-06-17.