67 matches found
ROOT-APP-NPM-CVE-2026-26280 CVE-2026-26280 in @rootio/systeminformation - Patched by Root
Root has patched CVE-2026-26280 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...
Linux Distros Unpatched Vulnerability : CVE-2026-26280
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks functio...
Security Bulletin: IBM Maximo Application Suite - Monitor Component uses systeminformation-5.28.5.tgz, systeminformation-5.28.6.tgz, systeminformation-5.28.7.tgz which is vulnerable to CVE-2026-26280, CVE-2026-26318.
Summary IBM Maximo Application Suite - Monitor Component uses systeminformation-5.28.5.tgz, systeminformation-5.28.6.tgz, systeminformation-5.28.7.tgz which is vulnerable to CVE-2026-26280, CVE-2026-26318. This bulletin contains information addressing the vulnerability. Vulnerability Details...
CVE-2026-26280 vulnerabilities
Vulnerabilities for packages: kibana, gemini-cli...
CVE-2026-26280
systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In...
CVE-2026-26280
systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In...
UBUNTU-CVE-2026-26280
systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In...
CVE-2026-26280 Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path
systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In...
7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/evals (>=0.0.104, <=2.0.30) +421 more potentially affected by CVE-2026-26280 via systeminformation (>=5.0.6, <=5.30.7)
systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =1.0.10, =1.0.84 and more Source cves: CVE-2026-26280 Source advisory: OSV:GHSA-9C88-49P5-5GGF...
7ghost-cli (>=1.17.6-next.0, <=1.18.4), @agentuity/evals (>=0.0.104, <=2.0.30) +421 more potentially affected by CVE-2026-26280 via systeminformation (>=5.0.6, <=5.30.7)
systeminformation NPM version =5.0.6, =1.17.6-next.0, =0.0.104, =3.0.0-alpha.0, =0.0.6, =0.0.63, =0.0.2, =3.0.0-alpha.0, =0.1.1, =0.1.1, =4.1.0-rc.4, =4.0.0-devnet.2-patch.0, =0.0.1-2.1-beta-provision, =1.0.10, =1.0.84 and more Source cves: CVE-2026-26280 Source advisory:...
CVE-2026-26280
creationtimestamp| type| source ---|---|--- 2026-02-17 19:07:11+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf 2026-02-19 21:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaiiph3fr2h...
MiracleLinux 9 : libarchive-3.5.3-2.el9 (AXSA:2022-3983:02)
The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2022-3983:02 advisory. libarchive: an out-of-bounds read via the component zipxlzmaaloneinit CVE-2022-26280 Tenable has extracted the preceding description block directly from the...
MAL-2025-26280 Malicious code in mgyt4s (npm)
The package mgyt4s was found to contain malicious code...
CVE-2023-26280
IBM Jazz Foundation 7.0.2 and 7.0.3 could allow a user to change their dashboard using a specially crafted HTTP request due to improper access control...
CVE-2021-26280
Locally installed application can bypass the permission check and perform system operations that require permission...
CVE-2021-26280
creationtimestamp| type| source ---|---|--- 2024-12-17 09:15:27+00:00| seen| https://t.me/cvedetector/13072...
CVE-2021-26280
Locally installed application can bypass the permission check and perform system operations that require permission...
CVE-2021-26280
CVE-2021-26280 (Vivo Permission manager module) is a locally exploitable vulnerability where a locally installed app can bypass permission checks and perform system operations that require permissions. The entry is supported by multiple sources (NVD, Red Hat, CVE listing) indicating a local attac...
