ROOT-APP-NPM-CVE-2026-26280 CVE-2026-26280 in @rootio/systeminformation - Patched by Root

Root has patched CVE-2026-26280 in the @rootio/systeminformation package for Root:npm. Multiple fixed versions available...

CVE-2026-26280 vulnerabilities

Vulnerabilities for packages: kibana, gemini-cli...

UBUNTU-CVE-2026-26280

systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In...

CVE-2026-26280 Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path

systeminformation is a System and OS information library for node.js. In versions prior to 5.30.8, a command injection vulnerability in the wifiNetworks function allows an attacker to execute arbitrary OS commands via an unsanitized network interface parameter in the retry code path. In...

CVE-2026-26280

creationtimestamp| type| source ---|---|--- 2026-02-17 19:07:11+00:00| published-proof-of-concept| https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf 2026-02-19 21:01:57+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mfaiiph3fr2h...