https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 07 Oct 2026 04:58:34 +0000 https://vulnerability.circl.lu/vuln/cve-2026-86711 <p><strong>Affected:</strong> electerm</p> <p>electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.</p> <p><strong>Affected:</strong> electerm</p> <p>electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.</p> https://vulnerability.circl.lu/vuln/cve-2026-86711