HIGH8.8CVE-2026-26318Command Injection via Unsanitized `locate` Output in `versions()` — systeminformation
from 0
HIGH8.4CVE-2026-26280Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path
from 0
HIGH8.1CVE-2025-68154systeminformation has a Command Injection vulnerability in fsSize() function on Windows
from 0
HIGH7.8CVE-2026-44724Systeminformation vulnerable to Linux command injection in networkInterfaces() via unsanitized NetworkManager connection profile name
from 0
HIGH7.8Systeminformation has command injection vulnerability in getWindowsIEEE8021x (SSID)