Beveiligingsadvies

CVE-2026-86711

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-09-08 11:23:04

Laatst bijgewerkt 2026-09-08 12:17:37

Toegewezen door VulnCheck

CVSS-score 7.5

Status PUBLISHED

Beschrijving

electerm before 5.3.15 exposes 40+ main-process functions through an unvalidated Electron IPC handler with no function-name allowlist or sender validation. Renderer-side script execution can invoke openFileWithEditor and other functions with arbitrary arguments to execute system commands in the main process.

← Alle CVE's bekijken Bekijk op cve.org ↗