systeminformation: OS command injection in networkInterfaces() via interfaces(5) source-directive path on Linux

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-50289 · Microsoft / collected KEV context

GHSA-5xpp-75jx-m839

cve-program · CVE-2026-50289

• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839
• https://github.com/sebhildebrandt/systeminformation/commit/bbfddde48672d0ee124fefdb3cb4442fd9dd4f03
• https://github.com/sebhildebrandt/systeminformation/releases/tag/v5.31.7

nvd · CVE-2026-50289

• https://github.com/sebhildebrandt/systeminformation/commit/bbfddde48672d0ee124fefdb3cb4442fd9dd4f03
• https://github.com/sebhildebrandt/systeminformation/releases/tag/v5.31.7
• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839

osv · GHSA-5xpp-75jx-m839

• https://github.com/sebhildebrandt/systeminformation/security/advisories/GHSA-5xpp-75jx-m839
• https://github.com/sebhildebrandt/systeminformation/commit/bbfddde48672d0ee124fefdb3cb4442fd9dd4f03
• https://github.com/sebhildebrandt/systeminformation
• https://github.com/sebhildebrandt/systeminformation/releases/tag/v5.31.7

No related operational record is retained in the current change model.