CVE-2020-26300mediumCWE-77

CVE-2020-26300: falha de média gravidade em sebhildebrandt systeminformation

Command injection in systeminformation

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar systeminformation+ Monitorar systeminformation

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 5.9epss 1.4%
systeminformation is an npm package that provides system and OS information library for node.js. In systeminformation before version 4.26.2 there is a command injection vulnerability. Problem was fixed in version 4.26.2 with a shell string sanitation fix.
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
Produtos afetados
sebhildebrandt · systeminformation
CVEs relacionadas — sebhildebrandt systeminformation

No mesmo produto, das mais perigosas para as menos.

CVE-2021-21315HIGHCommand Injection VulnerabilityEPSS 90.7%KEVCVE-2025-68154HIGHCommand Injection in fsSize() on WindowsEPSS 13.0%CVE-2020-26274MEDIUMCommand Injection Vulnerability in systeminformationEPSS 2.7%CVE-2020-26245HIGHPrototype Pollution leading to Command Injection in systeminformationEPSS 2.2%CVE-2023-42810CRITICALsysteminformation SSID Command Injection VulnerabilityEPSS 2.2%CVE-2026-50289HIGHsysteminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on LinuxEPSS 2.2%