systeminformation vulnerabilities (Root)

6 vulnerabilities.

• systeminformation Root systeminformation: Windows command injection in services() through Unicode quotation marks CVE-2026-116576 Fix available 7.8 HighOctober 26, 2026
• systeminformation Root systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux CVE-2026-50289 Fix available 8.7 HighJuly 15, 2026
• systeminformation Root systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name CVE-2026-44724 Fix available 7.8 HighMay 13, 2026
• systeminformation Root systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` CVE-2026-26318 Fix available 8.8 HighFebruary 18, 2026
• systeminformation Root Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path CVE-2026-26280 Fix available 8.4 HighFebruary 18, 2026
• systeminformation Root Command Injection in fsSize() on Windows CVE-2025-68154 Fix available EPSS 13.0% 8.1 HighDecember 16, 2025