node-systeminformation vulnerabilities (Ubuntu)

9 vulnerabilities.

• node-systeminformation Ubuntu systeminformation: Prototype pollution in `networkStats()` via the interface name CVE-2026-116674 Fix available 6.5 MediumOctober 27, 2026
• node-systeminformation Ubuntu systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net CVE-2026-116673 Fix available 3.3 LowOctober 27, 2026
• node-systeminformation Ubuntu systeminformation: Windows command injection in services() through Unicode quotation marks CVE-2026-116576 Fix available 7.8 HighOctober 26, 2026
• node-systeminformation Ubuntu systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux CVE-2026-50289 Fix available 8.7 HighJuly 15, 2026
• node-systeminformation Ubuntu systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name CVE-2026-44724 Fix available 7.8 HighMay 13, 2026
• node-systeminformation Ubuntu systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` CVE-2026-26318 Fix available 8.8 HighFebruary 18, 2026
• node-systeminformation Ubuntu Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path CVE-2026-26280 Fix available 8.4 HighFebruary 18, 2026
• node-systeminformation Ubuntu Command Injection in fsSize() on Windows CVE-2025-68154 Fix available EPSS 13.0% 8.1 HighDecember 16, 2025
• node-systeminformation Ubuntu Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation CVE-2024-56334 Fix available 7.8 HighDecember 20, 2024