Signal is active with 5 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes any URL clicked in the terminal directly to shell.openExternal without any protocol validation. An attacker who controls terminal output (e.g., via a malicious SSH server, compromised remote host, or malicious plugin rendering terminal content) can thus achieve arbitrary code execution or local file access on the victim's machine, requiring only that the victim clicks a displayed link. At time of publication, there are no publicly available patches.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-10 | 1 | General1 |
| 2026-05-14 | 5 | Disclosure4General1 |
CVE-2026-43941 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In versions 3.8.15 and prior, Electerm's terminal hyperlink handler passes a… https://www.cve.org/CVERecord?id=CVE-2026-43941
Post summary
CVE-2026-43941 is referenced as a vulnerability in Electerm’s terminal hyperlink handling, but no PoC, exploit, patch, or detailed technical information is provided.
--- Validated by the Lyrie Threat Intelligence Pipeline — 3 independent sources confirmed before publication. No speculation. CVE: CVE-2026-43941 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory announces CVE‑2026‑43941 as critical (CVSS 9.6/3.1) but provides no PoC, exploit code, or mitigation details.
References CVE: CVE-2026-43941 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory announces CVE-2026-43941 as a critical vulnerability with a high CVSS score, but it does not provide detailed technical exploitable information, any PoC, or mitigation guidance.
CRITICAL: CVE-2026-43941 (CVSS 9.6) — multiple products. CVE: CVE-2026-43941 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory
Post summary
The advisory announces CVE-2026-43941 with a CVSS score of 9.6 and critical severity, but provides no PoC, exploit code, or evidence of active exploitation.
CVE: CVE-2026-43941 CVSS: 9.6 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client.
Post summary
CVE-2026-43941 is publicly disclosed as a critical vulnerability in the Electerm client, with detailed CVSS scoring but no evidence of exploitation, PoC, or patches.
https://lyrie.ai/research/research/cve-2026-43941-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack
Post summary
The provided text is a link to an advisory and hashtags, with no further information on the CVE’s technical details, exploitation status, or mitigation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | electerm_project | electerm | - | - | - |