SE
Vendor
sebhildebrandt
9
CVEs
1
On KEV
3
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116674 New | SY systeminformation sebhildebrandt | 6.5 | Oct 27 | systeminformation: Prototype pollution in `networkStats()` via the interface name |
| CVE-2026-116673 New | SY systeminformation sebhildebrandt | 3.3 | Oct 27 | systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net |
| CVE-2026-116576 New | SY systeminformation sebhildebrandt | 7.8 | Oct 26 | systeminformation: Windows command injection in services() through Unicode quotation marks |
| CVE-2026-50289 | SY systeminformation sebhildebrandt | 8.8 | Jul 17 | systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux |
| CVE-2026-44724 | SY systeminformation sebhildebrandt | 7.8 | May 27 | systeminformation: Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name |
| CVE-2026-26318 | SY systeminformation sebhildebrandt | 8.8 | Feb 19 | systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` |
| CVE-2026-26280 | SY systeminformation sebhildebrandt | 7.8 | Feb 19 | Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path |
| CVE-2024-56334 | SY systeminformation sebhildebrandt | 7.8 | Dec 20 | Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation |
| CVE-2021-21315 In wildKEV | SY systeminformation sebhildebrandt | 7.8 | Feb 16 | Command Injection Vulnerability |