CVE-2026-26280
1 advisory.
npm/systeminformation CVE-2026-26280: high 8.4
Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path
Action: Upgrade systeminformation to 5.30.8 or later.
npm i systeminformation@5.30.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.30.8 | - |
Fixed versions
| 5.30.8 |
Sources
- osv: GHSA-9c88-49p5-5ggf
- https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf
- https://nvd.nist.gov/vuln/detail/CVE-2026-26280
- https://github.com/sebhildebrandt/systeminformation/commit/22242aa56188f2bffcbd7d265a11e1ebb808b460
- https://github.com/sebhildebrandt/systeminformation
CVE-2026-26280 · published · modified · JSON