SY
Product
systeminformation
On CISA KEVExploited in the wild
10
CVEs
1
On KEV
8.8
Max CVSS
3
New 30D
Severity mix
Critical 0High 8Medium 1Low 1
Watch
Add systeminformation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-21315 In wildKEV | 7.8 | Feb 16 | Command Injection Vulnerability Affected: < 5.3.1 |
| CVE-2026-50289 | 8.8 | Jul 17 | systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux Affected: < 5.31.7 |
| CVE-2026-26318 | 8.8 | Feb 19 | systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` Affected: < 5.31.0 |
| CVE-2025-68154 | 8.1 | Dec 16 | Command Injection in fsSize() on Windows Affected: < 5.27.14 |
| CVE-2026-116576 New | 7.8 | Oct 26 | systeminformation: Windows command injection in services() through Unicode quotation marks Affected: < 5.33.16 |
| CVE-2026-44724 | 7.8 | May 27 | systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name Affected: >= 4.17.0, < 5.31.6 |
| CVE-2026-26280 | 7.8 | Feb 19 | Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path Affected: < 5.30.8 |
| CVE-2024-56334 | 7.8 | Dec 20 | Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation Affected: < 5.23.7 |
Showing 8