Vendor
Sebhildebrandt
15 known vulnerabilities in products by Sebhildebrandt, 1 of them actively exploited (CISA KEV).
Key figures
15
Vulnerabilities
1
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2021-21315 | Command Injection Vulnerability In CISA KEValso in 2 other products | 7.1 | |
| High | CVE-2026-50289 | Sebhildebrandt Systeminformation: OS Command Injection | 8.8 | |
| High | CVE-2025-68154 | Command Injection in fsSize() on Windows | 8.1 | |
| Critical | CVE-2023-42810 | systeminformation SSID Command Injection Vulnerability | 9.8 | |
| High | CVE-2026-26280 | Systeminformation has a Command Injection via unsanitized interface parameter in wifi.js retry path | 8.4 | |
| High | CVE-2026-26318 | systeminformation has Command Injection via Unsanitized `locate` Output in `versions()` | 8.8 | |
| Critical | CVE-2020-26245 | Prototype Pollution leading to Command Injection in systeminformation | 8.1 | |
| Critical | CVE-2021-21388 | Command Injection Vulnerability in systeminformation | 8.9 | |
| High | CVE-2020-26274 | Command Injection Vulnerability in systeminformation | 6.4 | |
| High | CVE-2026-44724 | Sebhildebrandt Systeminformation: OS Command Injection | 7.8 | |
| Critical | CVE-2020-26300 | Command injection in systeminformation | 5.9 | |
| High | CVE-2026-116576 | systeminformation: Windows command injection in services() through Unicode quotation marks | 7.8 | |
| High | CVE-2024-56334 | Command injection vulnerability in getWindowsIEEE8021x (SSID) function in systeminformation | 7.8 | |
| Medium | CVE-2026-116674 | systeminformation: Prototype pollution in `networkStats()` via the interface name | 6.5 | |
| Low | CVE-2026-116673 | Sebhildebrandt Systeminformation: Path Traversal | 3.3 |
Products
| Systeminformation | 15 | 1 |