Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path

Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.

CVE-2026-26280 · CVE overview and exploitation status

EUVD-2026-7969

GHSA-9c88-49p5-5ggf

cve-program · CVE-2026-26280

• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf
• https://github.com/sebhildebrandt/systeminformation/commit/22242aa56188f2bffcbd7d265a11e1ebb808b460

euvd · EUVD-2026-7969

• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf
• https://github.com/sebhildebrandt/systeminformation/commit/22242aa56188f2bffcbd7d265a11e1ebb808b460

nvd · CVE-2026-26280

• https://github.com/sebhildebrandt/systeminformation/commit/22242aa56188f2bffcbd7d265a11e1ebb808b460
• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf
• https://access.redhat.com/security/cve/CVE-2026-26280
• https://bugzilla.redhat.com/show_bug.cgi?id=2441121
• https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-26280.json

osv · GHSA-9c88-49p5-5ggf

• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-9c88-49p5-5ggf
• https://nvd.nist.gov/vuln/detail/CVE-2026-26280
• https://github.com/sebhildebrandt/systeminformation/commit/22242aa56188f2bffcbd7d265a11e1ebb808b460
• https://github.com/sebhildebrandt/systeminformation

No related changes are available here.