Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via imported bookmarks or compromised sync targets. Affects users who import bookmark JSON files or who have electerm sync configured (gist/WebDAV). The attacker can inject exec* fields or global config to cause remote code to run when a bookmark is opened or when sync is applied.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-45058 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via impor… https://www.cve.org/CVERecord?id=CVE-2026-45058
Post summary
CVE-2026-45058 in Electerm allows persistent local‑pty code execution in versions 3.8.8 and earlier; no PoC, exploit tool, or patch is cited.
CVE-2026-45058 Persistent Code Execution in Electerm 3.8.8 via Bookmark Import and Sync https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-45058
Post summary
CVE-2026-45058 is a newly disclosed vulnerability enabling persistent code execution in Electerm 3.8.8 through bookmark import and sync. No PoC, exploit, patch, or active exploitation information is provided.
🚨*CVE* CVE-2026-45058 electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. In 3.8.8 and earlier, there is persistent local-pty code execution via impor… https://www.cve.org/CVERecord?id=CVE-2026-45058 ----- Traducción: CVE-2026-45058 ele… http://infoflow.cloud`
Post summary
The post announces CVE-2026-45058, a local-pty code execution flaw in electerm versions 3.8.8 and older, without mentioning any PoC, exploit code, or active exploitation.