CVE-2026-41501

creationtimestamp| type| source ---|---|--- 2026-05-08 06:29:06+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mld43oqcmb2n 2026-05-08 20:37:08+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mleli66ktf26 2026-05-10 02:49:32+00:00| seen|...

CVE-2026-41501

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to version 3.3.8, a command injection vulnerability exists in github.com/elcterm/electerm/npm/install.js:130. The runLinux function appends attacker-controlled remote version strings directly into an...