SY
Product
systeminformation
On CISA KEVExploited in the wild
7
CVEs
1
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 5Medium 1Low 1
Watch
Add systeminformation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21315 In wildKEV | 7.8 | Feb 16 | Command Injection Vulnerability Affected: < 5.3.1 |
| CVE-2026-50289 | 8.8 | Jul 17 | systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux Affected: < 5.31.7 |
| CVE-2026-116576 New | 7.8 | Oct 26 | systeminformation: Windows command injection in services() through Unicode quotation marks Affected: < 5.33.16 |
| CVE-2026-44724 | 7.8 | May 27 | systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name Affected: >= 4.17.0, < 5.31.6 |
| CVE-2024-56334 | 7.8 | Dec 20 | Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation Affected: < 5.23.7 |
| CVE-2026-116674 New | 6.5 | Oct 27 | systeminformation: Prototype pollution in `networkStats()` via the interface name Affected: < 5.33.13 |
| CVE-2026-116673 New | 3.3 | Oct 27 | systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net Affected: < 5.33.14 |
Showing 7