CVE-2026-73226

Publié : 11 août 2026

Modifié : 11 août 2026

Score CVSS

8.8

HIGH

Description détaillée

electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.186, electerm allows an authenticated WebSocket client to invoke unintended internal functions through client-controlled func values in upgrade-func in src/app/server/dispatch-center.js and handleFs in src/app/server/fs.js, exposing Upgrade and fsExport methods that can execute commands, open files, mutate the filesystem, or terminate the process. This issue is fixed in version 3.15.186.

Vecteur d'attaque (CVSS)

Vecteur brut :CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Références et Patchs

https://github.com/electerm/electerm/commit/b1729eb67a4cd9cf1182de69dc2c8e051931740f https://github.com/electerm/electerm/pull/4447 https://github.com/electerm/electerm/releases/tag/v3.15.186 https://github.com/electerm/electerm/security/advisories/GHSA-8chw-jwc5-8587

Dernières Vulnérabilités

CVE-2026-73283

In sshd in OpenSSH before 10.5, the restrict keyword (in authorized_keys) was supposed to be applicable to tunnel forwarding but was not.

VOIR DÉTAILS

CVE-2026-73282

In ssh in OpenSSH before 10.5, a use-after-free for realloc data can occur if a certain pair of remote-forwarding operations are concurrent.

VOIR DÉTAILS

CVE-2026-73281

In ssh-agent in OpenSSH before 10.5, some operations can occur remotely but were intended to occur only locally, including operations that add tokens or use keys. This is caused by misinteraction between agent locking and the session-bind@openssh.com extension.

VOIR DÉTAILS